last executing test programs:

888.252115ms ago: executing program 0 (id=1880):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2) (async)
r3 = socket(0x28, 0x5, 0x0)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r4, 0x4) (async)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) (async)
recvmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet(r3, 0x0, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "01000000"}]}]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x0)

791.072606ms ago: executing program 1 (id=1882):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x42fd}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003c40)=@newtfilter={0x40, 0x2c, 0xd27, 0x170b52b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "01000000"}]}]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x42fd}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003c40)=@newtfilter={0x40, 0x2c, 0xd27, 0x170b52b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x2) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "01000000"}]}]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x0) (async)

789.440601ms ago: executing program 0 (id=1883):
r0 = socket$inet(0x2, 0x4000000000000001, 0x100)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x220, 0x110, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010101, 0x0, 0x7ffffffe}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x1)
ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f00000002c0))
close(0x4)
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000340)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$inet6_sctp(0xa, 0xf, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0)
write(r5, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r10, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r10, @ANYBLOB="0800020001000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000030a05040000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000002280001000800014000000000080002400000000a140003006e657464657673696d30000000000000140000001100010000000000000000000500fc09"], 0x84}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_USERDATA={0x104, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x164}}, 0x40000)

620.834264ms ago: executing program 1 (id=1885):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x68c01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x88, 0x0, 0xffb, 0x7, 0xb6b, 0x10000000, 0x4, 0x1, 0x3, 0x9, 0xfb, 0x1000, 0x3, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x1, 0x100000, 0x2, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0x7, 0x40, 0x2, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x6, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x10001, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x8, 0x80180000, 0x4003, 0x8b, 0x7, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x1000009, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x1, 0x0, 0x10000, 0x40000000, 0x800, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x1000100, 0xffffffff, 0x252, 0x7e, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0x2, 0x43, 0x2, 0x5, 0x8, 0x1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x26cd, 0x8, 0x8, 0x5, 0x1f8, 0x1ff, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0)

470.291807ms ago: executing program 1 (id=1888):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800)
ioctl$OCFS2_IOC_UNRESVSP64(r6, 0x4030582b, &(0x7f0000000140)={0x0, 0x2, 0x9, 0xc63, 0x3, 0x9})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r7 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0x6}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4050)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0)

469.152796ms ago: executing program 2 (id=1889):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x2, 0x80805, 0x0) (async)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3) (async)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r9, &(0x7f00000000c0)="45d47d42e9d2"}, 0x20)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={<r10=>r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={r10, 0x1c0}, &(0x7f0000000080)=0x8) (async)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={<r11=>r10, 0x1c0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={r11, 0x2}, 0x8)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r13, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$NFT_BATCH(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}}, 0x0) (async)
sendmsg$NFT_BATCH(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}}, 0x0)

360.799456ms ago: executing program 0 (id=1890):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xf, 0x3}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x0)

359.128091ms ago: executing program 1 (id=1891):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030009160000002cbd7000ffdbdf2502000900080000001c00000000000000050006003c0000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000009fd000000c005000500000000000a004e2400000009000000000000000000000000000000000600000003000000060008"], 0xb0}, 0x1, 0x7}, 0x18004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800010000000000ffdbdf250a0000000000fd000000000014000500000000000000000400"], 0x30}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.time\x00', 0x0, 0x0)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000280)={0x20000004})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20010004}, 0x840)
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x7c, r5, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040044}, 0x4040004)
r7 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0x2}}, 0x14}}, 0x8000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'erspan0\x00', &(0x7f00000011c0)={'tunl0\x00', <r8=>0x0, 0x0, 0x8000, 0x3d4a, 0x2, {{0x2f, 0x4, 0x0, 0x7, 0xbc, 0x67, 0x0, 0x9, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0xb, "c0bd9f8d4e86cf3cdb"}, @timestamp={0x44, 0x28, 0xe0, 0x0, 0x6, [0x9, 0x400, 0x7, 0x8000, 0x8, 0xffff, 0x6, 0xe, 0x9d9]}, @timestamp={0x44, 0x1c, 0x13, 0x0, 0x4, [0x1ff, 0x9, 0x0, 0x10000, 0x1ff, 0xe]}, @timestamp={0x44, 0xc, 0x8a, 0x0, 0x0, [0x7, 0x800000]}, @end, @timestamp_prespec={0x44, 0x4c, 0x19, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x42}, 0xa309}, {@multicast1, 0xfffffffa}, {@empty, 0x2}, {@remote, 0x4}, {@local, 0xb24}, {@local, 0x9}, {@remote, 0x100}, {@empty, 0x2}, {@empty, 0x5b0}]}]}}}}})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8)
sendmsg$nl_xfrm(r7, &(0x7f0000000f00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a00)=@newsa={0x49c, 0x10, 0x200, 0x70bd2b, 0x25dfdbfe, {{@in=@empty, @in6=@private0, 0x4e21, 0x6, 0x4e24, 0xf, 0x2, 0xa0, 0x80, 0x11, r8, r9}, {@in6=@rand_addr=' \x01\x00', 0x4d2, 0x2b}, @in=@remote, {0x800000000000000, 0x100, 0x5, 0xf9, 0x8f, 0x10001, 0x7, 0x46}, {0x2, 0x5, 0xffffffff}, {0xfa, 0x1, 0x401}, 0x70bd29, 0x3503, 0x2, 0x1, 0xff, 0x13}, [@algo_auth_trunc={0xc3, 0x14, {{'sha512_mb\x00'}, 0x3b8, 0x40, "9dcd5f3db36823a38f4e0e9bfd5e4f0d5a148665040734996f5baf8335ed1ed5e4c4f5e554a9dcf54b02b29f54e326caf367a6d914966cd1baa8800a95bdd955a8072a3e26ed275ceda496985ea6a3902a8ee8906ea9632cc56543553383b70f999d4ffb4caa5379c679b79f46f0cd94ebdfeef2874b14"}}, @sa={0xe4, 0x6, {{@in6=@local, @in=@empty, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x20, 0x6, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x3c}, @in6=@mcast2, {0x9, 0x165, 0xc, 0x1, 0xffffffff, 0x0, 0x8, 0x2}, {0x7, 0x4000400000000000, 0x8, 0x4}, {0xffffff01, 0x1, 0x40}, 0x70bd2b, 0x34ff, 0xa, 0x3, 0x5e, 0xb0}}, @mark={0xc, 0x15, {0x35075d, 0x6}}, @algo_crypt={0xb5, 0x2, {{'lrw-camellia-aesni-avx2\x00'}, 0x368, "97e8190dbd5a246791f8158fc34757cf22c307c11de61677381fc0c3f9eea75b18a9586ca219aa40c1271d0b6d7fa0e52fc0991f833b197978bc325b375c491b52179e7feb2f03022a770253cd5c55bb541096c424324dde4621f5d05222c87602d6a1321eb0e3922217cf3b4e"}}, @algo_comp={0xf2, 0x3, {{'lzjh\x00'}, 0x550, "acfb5c399f534e2b2c596e959f7b8788f8ee2c51619a4d660eb66f77720d4faa893772311d5427efd380e803102723ffb113e078f208b81b90652c5d950d9ff2feaf847728d0a98e8ac5ebe525e1bacc3b9e40575c895f9f026a985d29fc7bbc80d1646d9884c89d33781a05c0a44598cf428c49c88dcfe4f79578d13ff84373ccd519d303e5d21709c83e6e2fe3315227e7687ef28ed1753c3f05f0bda4422e93225f2c9c2b67703f46"}}, @address_filter={0x28, 0x1a, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0xa, 0x5, 0x2}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075b, 0xe40}}, @iptfs_max_qsize={0x8, 0x28, 0x6}, @iptfs_max_qsize={0x8, 0x28, 0x4}]}, 0x49c}, 0x1, 0x0, 0x0, 0x8800}, 0x40804)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r11, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x4, 0x1}}, 0x26)
pipe(&(0x7f0000000080)={<r12=>0xffffffffffffffff})
r13 = socket$inet_udp(0x2, 0x2, 0x0)
close(r13)
splice(r12, 0x0, r13, 0x0, 0x3000, 0x100000000000000d)
setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x148, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xd8, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'batadv0\x00', {0xff}, 'ip6_vti0\x00', {}, 0x16}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10001, 0xad75, 0x2, 0x1, 0x0, "41b90e681072b3abe6c87d2a836c5cac981beafc309e725b3316cb0165191a3b74129a86b849dab4b197feaf0f4c052b84f9c827f46ea77989bbf80c0d89b4d9"}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xff000000, 0xffffffff, 'pimreg0\x00', 'pimreg\x00', {0xff}, {0xff}, 0x21, 0x0, 0x48}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x6, 0xa, 0x5, 0x6, 0x2, 0x2], 0x0, 0x2}, {0x2, [0x3, 0x3, 0x3, 0x6, 0x3, 0x2], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x40000)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf13b}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xbc}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14}}, 0x144}}, 0x0)

358.305373ms ago: executing program 2 (id=1892):
r0 = socket(0x23, 0x5, 0x0)
write(r0, 0x0, 0x0)
unshare(0x22020400)
connect$nfc_raw(r0, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x7}, 0x10) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4305}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x886c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}]}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc8}}, 0x0)

259.846302ms ago: executing program 1 (id=1893):
r0 = socket$kcm(0x29, 0x2, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000080)={r1, 0x0, 0x4, 0x88, 0x1, 0x2, [0x309, 0x40, 0x4, 0x8, 0x2, 0xffffffffffffffff]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000021000501fee3ffff000000000200000400000000040000000c001400937485dba4de17ef"], 0x28}}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000300)="060000000300000000", 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0)

209.273934ms ago: executing program 0 (id=1894):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0)

208.502184ms ago: executing program 2 (id=1895):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007ffe2001c0007800c00018008000140f60000020c000280080001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_DELSET={0x4b4, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x108, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff35}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe26f}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff7c8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10009}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x36}]}]}, @NFTA_SET_DESC_CONCAT={0x128, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x486}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x499}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x96e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x39888a06}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x507d301d}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x4}]}, @NFTA_SET_DESC={0x22c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a1b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1289}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x104}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0x144, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd637}, @NFTA_SET_FIELD_LEN={0xfffffe39, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5287}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xca}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa4c1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc45}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x40}]}]}, @NFT_MSG_DELTABLE={0x14c, 0x2, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0xfa, 0x6, "67615841185cf14cdaeb464498e9461eb1597ff07ba923cc4c6c6826956499075bb9b196dec71da4b7eaee31162542531f922759ded350c950df1b708fa240ec4b1cd9f5afc18ff6a1ec92f1753269bc898b3d5e16263bd3441ef7aab01c8cf2e0218ebece34373a96ca064693bf12ab1ebf2d9949f20d583b9ec268250fb085522143742dcaef8c058554cfb5e1eaf3d72f7ae6ea63bf4eb61758dc3cac24472ea23841827a2508610323e8671cf47d3e11e39ccdb44fb759e6666db2bb22ffaae00b9f018a05e1ab6718b53c92b1313df6f9f7effa0439749961c0ccda1a698576e6e0245bb256916365bc2dd6e7b3cb857bcb2724"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x684}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fcffffff100000001800018014000200776c616e30000000000000000000000008000900060000000800080000000000e0832e4515a4a3defaf2be5f5025"], 0x3c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a050c0000000000000000050000000c00034000000000000000030900020073f97a3000000000480004802c0001800e000100696d6d10901efbe99ab0a3a076d3f44ba1c06564696174650000001800028008000140000000010c00028008000100010000001800018008000100647570000c0002800800024000001400000011"], 0x9c}}, 0x20044000)

205.362814ms ago: executing program 1 (id=1896):
poll(0x0, 0x0, 0xfffffffc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="422ca51e8b98d03000df697720e7456000"], 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (async)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000d800000", 0x45) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) (async)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @broadcast}})
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xe, 0x4, 0x4, 0xffffffff, 0x0, 0x1, 0xfffffffd}, 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) (async)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r6, @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2) (async)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r12=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r10, r12, 0x25, 0x2, @val=@netkit}, 0x1c) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

131.231024ms ago: executing program 0 (id=1897):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x300}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x40010)

130.661802ms ago: executing program 2 (id=1898):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$netlink(0x10, 0x3, 0xc) (async)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tcx}, 0x1c) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r3, 0x8b2a, &(0x7f0000000040)) (async)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async, rerun: 64)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x6, 0x0) (async, rerun: 64)
ioctl$sock_inet_sctp_SIOCINQ(r6, 0x5760, 0x0) (async, rerun: 64)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x4, 0x15}, 0x48) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) (async)
sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r7, &(0x7f0000000340), &(0x7f0000000180)=""/122}, 0x20) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r2, r4, 0x0, r6}, 0x10) (async, rerun: 32)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0)

58.990842ms ago: executing program 0 (id=1899):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x154}, 0x1, 0x0, 0x0, 0x24008094}, 0x8044) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x803, 0x0)
r3 = epoll_create1(0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400ff2340834b80040d8c560a067f0258ff0000000000000006000000000000005f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810ee0000408c56040000", 0x58}], 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x14, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfb, {0xa, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20048024}, 0x4008030) (async)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000000000)={0xa0000001}) (async)
ppoll(&(0x7f0000000980)=[{r8, 0x1}], 0x1, 0x0, 0x0, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000140)={0x4}) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x20004004) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r10=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) (async)
r11 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async)
connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) (async)
setsockopt$inet6_tcp_int(r11, 0x6, 0xc, &(0x7f0000000100)=0x8, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)

1.507441ms ago: executing program 2 (id=1900):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x38, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4c}}, 0x0)

0s ago: executing program 2 (id=1901):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000980)={r0, &(0x7f0000000880)='fwd\x00', 0x400102, &(0x7f00000008c0)={@align=0xffff000000000000, {0x2, 0xdba0, 0x8, 0x101}}, 0x6, &(0x7f0000000900)={@_ha_fsid}, &(0x7f0000000940)=0x7})
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x52a58, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg0\x00', <r8=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000005c0)={@empty, @dev, <r9=>0x0}, &(0x7f0000000600)=0xc)
sendmsg$xdp(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x2c, 0x5, r2, 0x2f}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000a00)="b071b7dc93f5a836ada224d75836f411a98935c24154362cd729b0485ce6613f380d", 0x22}], 0x1, 0x0, 0x0, 0x20004010}, 0x404c0c3)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1b8, r3, 0x100, 0x70bd2b, 0x11f, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x98, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x10000010}, 0x40002)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47792' (ED25519) to the list of known hosts.
syzkaller login: [   49.509328][ T5528] cgroup: Unknown subsys name 'net'
[   49.643305][ T5528] cgroup: Unknown subsys name 'cpuset'
[   49.648743][ T5528] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.592669][ T5528] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.197684][ T4992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.204875][ T4992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.208500][ T4992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.213176][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.219349][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.223524][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.228470][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.228495][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.236628][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.236726][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.278396][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.283357][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.287506][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.291754][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.295275][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.812701][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.816043][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.818629][ T5606] bridge_slave_0: entered allmulticast mode
[   57.823396][ T5606] bridge_slave_0: entered promiscuous mode
[   57.830946][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.833718][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.836249][ T5606] bridge_slave_1: entered allmulticast mode
[   57.839574][ T5606] bridge_slave_1: entered promiscuous mode
[   57.875698][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.899373][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.959620][ T5606] team0: Port device team_slave_0 added
[   57.980738][ T5606] team0: Port device team_slave_1 added
[   58.008310][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.010885][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.013428][ T5602] bridge_slave_0: entered allmulticast mode
[   58.016307][ T5602] bridge_slave_0: entered promiscuous mode
[   58.035384][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.038254][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.048685][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.061460][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.065472][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.068680][ T5602] bridge_slave_1: entered allmulticast mode
[   58.073399][ T5602] bridge_slave_1: entered promiscuous mode
[   58.104632][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.107458][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.117881][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.137379][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.144510][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.214632][ T5602] team0: Port device team_slave_0 added
[   58.237297][ T5602] team0: Port device team_slave_1 added
[   58.252546][ T5606] hsr_slave_0: entered promiscuous mode
[   58.256048][ T5606] hsr_slave_1: entered promiscuous mode
[   58.292104][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.295014][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.306099][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.333922][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.337118][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.348870][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.379175][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.382270][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.385273][ T5613] bridge_slave_0: entered allmulticast mode
[   58.389949][ T5613] bridge_slave_0: entered promiscuous mode
[   58.419797][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.422975][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.426187][ T5613] bridge_slave_1: entered allmulticast mode
[   58.430963][ T5613] bridge_slave_1: entered promiscuous mode
[   58.470195][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.495794][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.550956][ T5602] hsr_slave_0: entered promiscuous mode
[   58.554152][ T5602] hsr_slave_1: entered promiscuous mode
[   58.557308][ T5602] debugfs: 'hsr0' already exists in 'hsr'
[   58.560196][ T5602] Cannot create hsr debugfs directory
[   58.571900][ T5613] team0: Port device team_slave_0 added
[   58.589155][ T5613] team0: Port device team_slave_1 added
[   58.679787][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.683056][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.694144][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.701419][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.704379][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.715208][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.814854][ T5613] hsr_slave_0: entered promiscuous mode
[   58.818185][ T5613] hsr_slave_1: entered promiscuous mode
[   58.822426][ T5613] debugfs: 'hsr0' already exists in 'hsr'
[   58.824958][ T5613] Cannot create hsr debugfs directory
[   58.942890][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.955027][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.966245][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.974305][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   59.011426][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.018089][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   59.037103][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.046064][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   59.113330][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.122870][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   59.127835][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.135847][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   59.140085][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.146839][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   59.152518][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.159186][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   59.254116][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.261770][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   59.265526][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.272456][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   59.276879][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.284169][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   59.288729][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.296538][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   59.329623][ T5607] Bluetooth: hci2: command tx timeout
[   59.332939][ T5607] Bluetooth: hci0: command tx timeout
[   59.335404][ T5607] Bluetooth: hci1: command tx timeout
[   59.443781][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.464035][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.491709][ T5602] 8021q: adding VLAN 0 to HW filter on device team0
[   59.508110][ T4957] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.512034][ T4957] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.526288][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[   59.542247][ T4957] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.545259][ T4957] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.563453][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.566447][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.599567][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.602557][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.632855][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.684932][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   59.701352][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.703782][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.718716][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.721088][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.145857][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.184499][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.221724][ T5602] veth0_vlan: entered promiscuous mode
[   60.237519][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.253538][ T5602] veth1_vlan: entered promiscuous mode
[   60.296337][ T5613] veth0_vlan: entered promiscuous mode
[   60.316962][ T5602] veth0_macvtap: entered promiscuous mode
[   60.323974][ T5613] veth1_vlan: entered promiscuous mode
[   60.334267][ T5602] veth1_macvtap: entered promiscuous mode
[   60.339872][ T5606] veth0_vlan: entered promiscuous mode
[   60.354398][ T5606] veth1_vlan: entered promiscuous mode
[   60.373678][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.394138][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.409243][ T5613] veth0_macvtap: entered promiscuous mode
[   60.415966][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.421040][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.435117][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.441121][ T5613] veth1_macvtap: entered promiscuous mode
[   60.461914][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.484179][ T5606] veth0_macvtap: entered promiscuous mode
[   60.516148][ T5606] veth1_macvtap: entered promiscuous mode
[   60.546657][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.578677][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.587921][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.600005][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.610639][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.615654][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.632611][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.636481][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.646343][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.663626][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.666595][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.680837][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.716172][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.721243][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.747513][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.757407][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.776892][ T5602] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.809129][   T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.815546][   T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.866654][   T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.877113][   T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.933860][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.940679][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.943460][ T4957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.953608][ T4957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.964141][ T5661] IPVS: starting estimator thread 0...
[   61.059595][ T5715] IPVS: using max 51 ests per chain, 122400 per kthread
[   61.184410][ T5724] netlink: 'syz.1.5': attribute type 1 has an invalid length.
[   61.194095][ T5727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5'.
[   61.357813][ T5726] Zero length message leads to an empty skb
[   61.370023][ T5734] netlink: 'syz.0.6': attribute type 1 has an invalid length.
[   61.375795][ T5734] nbd: error processing sock list
[   61.379892][ T5734] block nbd0: shutting down sockets
[   61.399044][ T4992] Bluetooth: hci1: command tx timeout
[   61.402209][ T5607] Bluetooth: hci0: command tx timeout
[   61.402219][   T55] Bluetooth: hci2: command tx timeout
[   61.516701][ T5743] syzkaller0: entered promiscuous mode
[   61.521129][ T5743] syzkaller0: entered allmulticast mode
[   61.730492][ T5769] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12'.
[   62.185777][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'.
[   62.208749][ T5804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'.
[   62.410720][ T5819] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET)
[   62.465821][ T5816] netlink: 'syz.0.26': attribute type 1 has an invalid length.
[   62.493137][ T5816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.26'.
[   62.590104][ T5826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'.
[   62.593777][ T5826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'.
[   62.814441][ T5840] block nbd0: Receive control failed (result -32)
[   62.817757][   T56] block nbd0: Receive control failed (result -32)
[   62.902879][ T5849] netlink: 'syz.1.35': attribute type 21 has an invalid length.
[   62.926063][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'.
[   63.212768][ T5877] syzkaller0: entered promiscuous mode
[   63.217764][ T5877] syzkaller0: entered allmulticast mode
[   63.261043][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'.
[   63.408586][ T5894] netlink: 'syz.2.48': attribute type 3 has an invalid length.
[   63.425515][ T5894] netlink: 'syz.2.48': attribute type 3 has an invalid length.
[   63.439911][ T5897] netlink: 232 bytes leftover after parsing attributes in process `syz.1.49'.
[   63.480759][   T55] Bluetooth: hci2: command tx timeout
[   63.480796][ T5607] Bluetooth: hci0: command tx timeout
[   63.483039][   T55] Bluetooth: hci1: command tx timeout
[   63.701200][ T5681] IPVS: starting estimator thread 0...
[   63.796151][ T5920] sctp: [Deprecated]: syz.1.55 (pid 5920) Use of int in maxseg socket option.
[   63.796151][ T5920] Use struct sctp_assoc_value instead
[   63.819500][ T5915] IPVS: using max 40 ests per chain, 96000 per kthread
[   64.140901][ T5935] vlan2: entered promiscuous mode
[   64.292371][ T5945] SET target dimension over the limit!
[   65.156769][ T5962] vlan2: entered promiscuous mode
[   65.176955][ T5962] bridge0: entered promiscuous mode
[   65.563543][   T55] Bluetooth: hci0: command tx timeout
[   65.563643][ T5607] Bluetooth: hci2: command tx timeout
[   65.565999][   T55] Bluetooth: hci1: command tx timeout
[   65.656334][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.666628][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.672484][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.675639][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.950517][ T6023] x_tables: duplicate underflow at hook 3
[   65.958166][ T6023] x_tables: duplicate underflow at hook 3
[   65.987422][ T6023] x_tables: duplicate underflow at hook 3
[   65.999205][ T6023] x_tables: duplicate underflow at hook 3
[   66.007144][ T6023] x_tables: duplicate underflow at hook 3
[   66.014414][ T6023] x_tables: duplicate underflow at hook 3
[   66.020954][ T6023] x_tables: duplicate underflow at hook 3
[   66.022934][ T6023] x_tables: duplicate underflow at hook 3
[   66.025591][ T6023] x_tables: duplicate underflow at hook 3
[   66.027536][ T6023] x_tables: duplicate underflow at hook 3
[   66.295335][ T6057] Bluetooth: MGMT ver 1.23
[   66.299976][ T6047] syzkaller0: entered promiscuous mode
[   66.302080][ T6047] syzkaller0: entered allmulticast mode
[   67.201157][ T6060] syzkaller1: entered promiscuous mode
[   67.202894][ T6060] syzkaller1: entered allmulticast mode
[   67.448325][ T6081] netlink: 'syz.1.95': attribute type 4 has an invalid length.
[   67.456684][ T6081] __nla_validate_parse: 47 callbacks suppressed
[   67.456699][ T6081] netlink: 3581 bytes leftover after parsing attributes in process `syz.1.95'.
[   67.482186][ T6081] netlink: 'syz.1.95': attribute type 4 has an invalid length.
[   67.494473][ T6081] netlink: 3581 bytes leftover after parsing attributes in process `syz.1.95'.
[   67.558486][ T6092] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   67.590884][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'.
[   67.594369][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'.
[   67.684061][ T6106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99'.
[   67.756705][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'.
[   67.786302][ T6117] netlink: 104 bytes leftover after parsing attributes in process `syz.0.101'.
[   67.818103][ T6112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.100'.
[   67.820247][ T6118] netlink: 60 bytes leftover after parsing attributes in process `syz.2.100'.
[   68.287695][ T6133] netlink: 'syz.0.105': attribute type 9 has an invalid length.
[   68.663287][ T6149] Illegal XDP return value 4294967274 on prog  (id 131) dev N/A, expect packet loss!
[   70.666504][ T6105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   70.823795][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'.
[   70.913946][ T6168] gretap1: entered allmulticast mode
[   71.645730][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[   71.648998][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[   73.893030][ T6168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   74.460199][ T6241] bond1: entered allmulticast mode
[   74.496249][ T6251] __nla_validate_parse: 3 callbacks suppressed
[   74.496270][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'.
[   74.685812][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.134'.
[   74.755197][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'.
[   75.354846][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'.
[   75.365478][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'.
[   76.082233][ T6313] netlink: 'syz.1.148': attribute type 2 has an invalid length.
[   76.112165][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.148'.
[   76.202731][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'.
[   76.436420][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'.
[   76.460946][ T6329] netlink: 'syz.1.154': attribute type 3 has an invalid length.
[   76.465244][ T6329] netlink: 'syz.1.154': attribute type 3 has an invalid length.
[   77.411627][ T6423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.170'.
[   77.415036][ T6423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.170'.
[   77.493956][ T6427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.818586][ T6448] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.266602][ T6477] IPVS: mh: UDP 127.0.0.1:20000 - no destination available
[   78.272380][ T5661] IPVS: starting estimator thread 0...
[   78.392564][ T6478] IPVS: using max 67 ests per chain, 160800 per kthread
[   78.838207][ T6512] warning: `syz.0.194' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.406676][ T6535] netlink: 'syz.1.203': attribute type 1 has an invalid length.
[   79.429972][ T6536] syzkaller1: entered promiscuous mode
[   79.434169][ T6536] syzkaller1: entered allmulticast mode
[   79.437868][ T6539] vxcan1: entered allmulticast mode
[   79.441292][ T6536] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[   79.612219][ T6535] veth3: entered allmulticast mode
[   79.623757][ T6535] bond1: (slave veth3): Enslaving as an active interface with a down link
[   79.635001][ T6543] bond1: (slave veth0_to_bond): making interface the new active one
[   79.643032][ T6543] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   79.714674][ T6546] syzkaller0: entered promiscuous mode
[   79.716561][ T6546] syzkaller0: entered allmulticast mode
[   79.833332][ T6558] netlink: 'syz.0.208': attribute type 1 has an invalid length.
[   79.842207][ T6558] __nla_validate_parse: 56 callbacks suppressed
[   79.842222][ T6558] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.208'.
[   79.919078][ T6560] xt_TPROXY: Can be used only with -p tcp or -p udp
[   80.106267][ T6565] netlink: 36 bytes leftover after parsing attributes in process `syz.1.207'.
[   80.110362][ T6565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.207'.
[   80.114037][ T6565] netlink: 36 bytes leftover after parsing attributes in process `syz.1.207'.
[   81.182595][ T6572] netlink: 96 bytes leftover after parsing attributes in process `syz.2.210'.
[   81.300413][ T6586] netlink: 'syz.2.214': attribute type 7 has an invalid length.
[   81.306876][ T6586] netlink: 'syz.2.214': attribute type 8 has an invalid length.
[   81.340772][ T6588] Bluetooth: hci0: unsupported parameter 5135
[   81.343604][ T6588] Bluetooth: hci0: unsupported parameter 8192
[   81.346321][ T6588] Bluetooth: hci0: unsupported parameter 5135
[   81.349586][ T6588] Bluetooth: hci0: unsupported parameter 8192
[   81.353174][ T6588] netlink: 'syz.1.216': attribute type 1 has an invalid length.
[   81.360059][ T6588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.903436][   T33] cfg80211: failed to load regulatory.db
[   84.474064][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'.
[   84.484568][ T6596] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000
[   84.497808][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'.
[   84.515028][ T6598] netlink: 48 bytes leftover after parsing attributes in process `syz.2.218'.
[   84.524872][ T6598] netlink: 48 bytes leftover after parsing attributes in process `syz.2.218'.
[   84.536170][ T6598] netlink: 48 bytes leftover after parsing attributes in process `syz.2.218'.
[   84.964493][ T6641] __nla_validate_parse: 62 callbacks suppressed
[   84.964509][ T6641] netlink: 56 bytes leftover after parsing attributes in process `syz.2.233'.
[   86.092254][ T6681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.242'.
[   86.099255][ T6681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.242'.
[   86.153907][ T6686] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   86.160931][ T6686] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   86.199730][ T6694] tipc: Can't bind to reserved service type 1
[   86.302343][ T6695] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   87.235287][ T6717] netlink: 'syz.1.252': attribute type 27 has an invalid length.
[   87.288150][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'.
[   87.292106][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'.
[   87.302646][ T6725] ip_tables: iptables: counters copy to user failed while replacing table
[   87.315100][ T6725] team_slave_0: entered allmulticast mode
[   87.532528][ T6743] netlink: 68 bytes leftover after parsing attributes in process `syz.0.262'.
[   87.639115][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.049638][   T55] Bluetooth: hci2: command tx timeout
[   90.265014][ T6725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   90.380923][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'.
[   90.384380][ T6786] netlink: 'syz.1.269': attribute type 1 has an invalid length.
[   90.387694][ T6786] netlink: 92 bytes leftover after parsing attributes in process `syz.1.269'.
[   90.412599][ T6786] Bluetooth: MGMT ver 1.23
[   90.552268][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'.
[   90.643573][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   90.670084][ T6799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   90.872676][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf0b
[   90.889477][ T6820] netlink: 'syz.0.279': attribute type 2 has an invalid length.
[   91.632764][ T6813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   91.772175][ T6831] netlink: 52 bytes leftover after parsing attributes in process `syz.1.281'.
[   91.824659][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'.
[   92.224596][ T6865] netlink: 'syz.1.292': attribute type 1 has an invalid length.
[   92.261255][ T6865] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.325743][ T6874] lo: entered allmulticast mode
[   92.503405][ T6882] xt_CT: No such helper "netbios-ns"
[   92.576948][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'.
[   92.592102][ T6885] block nbd1: Unsupported socket: should be TCP or UNIX.
[   92.763540][ T6894] netlink: 128 bytes leftover after parsing attributes in process `syz.2.301'.
[   93.003758][ T6898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.301'.
[   93.602618][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'.
[   93.806054][ T6908] syzkaller0: entered promiscuous mode
[   93.809587][ T6908] syzkaller0: entered allmulticast mode
[   94.160315][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'.
[   94.212049][ T6939] netlink: 'syz.2.314': attribute type 1 has an invalid length.
[   94.243770][ T6939] geneve2: entered promiscuous mode
[   94.246276][ T6938] bridge_slave_1: left allmulticast mode
[   94.248585][ T6938] bridge_slave_1: left promiscuous mode
[   94.252856][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.261926][ T6938] bridge_slave_0: left allmulticast mode
[   94.264327][ T6938] bridge_slave_0: left promiscuous mode
[   94.266915][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.509535][ T6953] bond2: entered promiscuous mode
[   94.511794][ T6953] bond2: entered allmulticast mode
[   94.582258][ T6956] syzkaller0: entered promiscuous mode
[   94.584794][ T6956] syzkaller0: entered allmulticast mode
[   94.655456][ T6951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.666125][ T6951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.674791][ T6951] bond0 (unregistering): Released all slaves
[   94.915358][ T6969] sctp: [Deprecated]: syz.1.323 (pid 6969) Use of int in max_burst socket option.
[   94.915358][ T6969] Use struct sctp_assoc_value instead
[   95.411641][ T7000] tipc: Started in network mode
[   95.414337][ T7000] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[   95.417479][ T7000] tipc: Enabled bearer <eth:ipvlan1>, priority 10
[   95.424466][ T7002] Bluetooth: ISO socket layer initialized
[   95.429810][ T7002] __nla_validate_parse: 14 callbacks suppressed
[   95.429829][ T7002] netlink: 96 bytes leftover after parsing attributes in process `syz.2.336'.
[   95.531607][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'.
[   96.035624][ T7028] Bluetooth: hci0: unsupported parameter 5135
[   96.043905][ T7028] Bluetooth: hci0: unsupported parameter 8192
[   96.048186][ T7028] Bluetooth: hci0: unsupported parameter 5135
[   96.051266][ T7028] Bluetooth: hci0: unsupported parameter 8192
[   96.430638][   T31] tipc: Node number set to 10136234
[   99.026350][ T7039] dvmrp6: entered allmulticast mode
[   99.076956][ T7045] netlink: 'syz.2.348': attribute type 1 has an invalid length.
[   99.085457][ T7045] netlink: 'syz.2.348': attribute type 2 has an invalid length.
[   99.087992][ T7045] netlink: 72 bytes leftover after parsing attributes in process `syz.2.348'.
[   99.352818][ T7068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.353'.
[  100.205830][ T7119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.362'.
[  100.218418][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.362'.
[  100.283111][ T7125] netlink: 432 bytes leftover after parsing attributes in process `syz.0.364'.
[  100.288312][ T7125] netlink: 18 bytes leftover after parsing attributes in process `syz.0.364'.
[  100.344260][ T7129] netlink: 48 bytes leftover after parsing attributes in process `syz.0.365'.
[  100.378505][ T7132] xt_check_table_hooks: 23 callbacks suppressed
[  100.378515][ T7132] x_tables: duplicate underflow at hook 2
[  100.417745][ T7137] netlink: 60 bytes leftover after parsing attributes in process `syz.0.367'.
[  100.503628][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'.
[  100.637855][ T7156] netlink: 116 bytes leftover after parsing attributes in process `syz.2.374'.
[  100.718620][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'.
[  100.834821][ T7164] geneve2: left promiscuous mode
[  100.838475][ T7164] bond2: left promiscuous mode
[  100.845921][ T7164] 8021q: adding VLAN 0 to HW filter on device bond2
[  100.863924][ T7167] block nbd0: NBD_DISCONNECT
[  100.865515][ T7167] block nbd0: Send disconnect failed -32
[  100.873208][ T7167] block nbd0: Send disconnect failed -32
[  100.879363][ T7167] block nbd0: shutting down sockets
[  100.895959][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'.
[  100.937225][ T7174] netlink: 88 bytes leftover after parsing attributes in process `syz.1.379'.
[  100.946182][ T7177] netlink: 104 bytes leftover after parsing attributes in process `syz.0.380'.
[  101.586715][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'.
[  101.790476][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.386'.
[  102.111824][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'.
[  102.149577][ T7214] netlink: 432 bytes leftover after parsing attributes in process `syz.1.392'.
[  102.265356][ T7226] Bluetooth: hci0: unsupported parameter 1280
[  102.269206][ T7226] Bluetooth: hci0: invalid length 0, exp 4 for type 32
[  102.334971][ T7229] netlink: 'syz.0.399': attribute type 21 has an invalid length.
[  102.375850][ T7229] netlink: 'syz.0.399': attribute type 1 has an invalid length.
[  105.339029][ T7232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  105.471189][ T7264] bond0: option min_links: invalid value (18446744073709551615)
[  105.474858][ T7264] bond0: option min_links: allowed values 0 - 2147483647
[  105.736753][ T7290] __nla_validate_parse: 2 callbacks suppressed
[  105.736767][ T7290] netlink: 40 bytes leftover after parsing attributes in process `syz.0.412'.
[  105.762069][ T7292] xt_hashlimit: size too large, truncated to 1048576
[  108.645178][ T7278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  108.815756][ T7319] xt_CT: You must specify a L4 protocol and not use inversions on it
[  109.231949][ T7362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.428'.
[  109.812400][ T7423] netlink: 72 bytes leftover after parsing attributes in process `syz.2.443'.
[  109.903583][ T7431] netlink: 108 bytes leftover after parsing attributes in process `syz.2.445'.
[  109.956066][ T7433] syzkaller1: entered promiscuous mode
[  109.962862][ T7433] syzkaller1: entered allmulticast mode
[  109.998593][ T7433] erspan0: entered promiscuous mode
[  110.018721][ T7433] netlink: 'syz.0.446': attribute type 3 has an invalid length.
[  110.024705][ T7433] netlink: 'syz.0.446': attribute type 3 has an invalid length.
[  110.028193][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.038449][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'.
[  110.189086][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'.
[  110.489253][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.571930][ T7456] C: renamed from veth1_to_team (while UP)
[  110.589063][ T7456] netlink: 'syz.0.456': attribute type 1 has an invalid length.
[  110.593821][ T7456] netlink: 116 bytes leftover after parsing attributes in process `syz.0.456'.
[  110.601259][ T7456] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  110.641435][ T7456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.456'.
[  110.977379][ T7474] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  112.497736][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'.
[  112.538571][ T7545] netlink: 64 bytes leftover after parsing attributes in process `syz.1.482'.
[  112.578978][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'.
[  112.815697][ T7565] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.826837][ T7569] TCP: TCP_TX_DELAY enabled
[  112.856022][ T7569] netlink: 'syz.1.488': attribute type 3 has an invalid length.
[  112.871509][ T7569] netlink: 'syz.1.488': attribute type 3 has an invalid length.
[  112.927492][   T12] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  112.948470][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'.
[  113.036671][ T7579] netlink: 52 bytes leftover after parsing attributes in process `syz.1.494'.
[  113.049696][   T34] audit: type=1804 audit(1789685039.578:2): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.495" name="/newroot/145/cgroup.controllers" dev="tmpfs" ino=750 res=1 errno=0
[  113.083262][   T34] audit: type=1800 audit(1789685039.578:3): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.495" name="cgroup.controllers" dev="tmpfs" ino=750 res=0 errno=0
[  113.165621][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.181183][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.191584][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'.
[  113.196274][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.218186][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.234254][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.251579][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.261135][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.263870][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.271210][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.277137][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.284462][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.291972][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.300419][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.303849][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.313318][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.323518][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.332026][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.340700][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.344563][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.347816][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.351185][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.354378][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.357876][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.360904][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.363517][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.364038][ T7605] nbd: must specify a size in bytes for the device
[  113.366281][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.371459][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.374382][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.378200][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.381045][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.384256][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.387349][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.390559][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.393390][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.396271][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.399994][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.403346][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.406454][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.409536][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.412883][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.418703][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.429444][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.432546][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.435610][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.444637][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.449555][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.454779][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.462621][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.465124][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.467528][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.470693][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.473849][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.476713][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.481579][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.486137][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.489593][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.492642][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.495520][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.498410][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.501769][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.504939][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.510199][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.524732][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.531745][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.537907][ T7592] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20002
[  113.659551][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'.
[  113.728722][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  113.747581][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'.
[  113.754319][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.757981][ T7629] netlink: 'syz.0.509': attribute type 3 has an invalid length.
[  113.763927][ T7629] netlink: 'syz.0.509': attribute type 3 has an invalid length.
[  113.844174][ T7627] netlink: 44 bytes leftover after parsing attributes in process `syz.2.508'.
[  113.919196][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.954254][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'.
[  114.421030][ T7666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.549032][ T7674] netlink: 'syz.1.519': attribute type 21 has an invalid length.
[  114.632504][ T7676] bridge4: entered promiscuous mode
[  114.635898][ T7676] bridge4: entered allmulticast mode
[  114.642271][ T7676] team0: Port device bridge4 added
[  114.645863][ T7676] bridge0: port 3(team0) entered blocking state
[  114.649801][ T7676] bridge0: port 3(team0) entered disabled state
[  114.655477][ T7676] team0: entered allmulticast mode
[  114.659666][ T7676] team_slave_0: entered allmulticast mode
[  114.665405][ T7676] team_slave_1: entered allmulticast mode
[  114.682907][ T7676] team0: entered promiscuous mode
[  114.686516][ T7676] team_slave_0: entered promiscuous mode
[  114.691016][ T7676] team_slave_1: entered promiscuous mode
[  114.694688][ T7676] bridge0: port 3(team0) entered blocking state
[  114.698653][ T7676] bridge0: port 3(team0) entered forwarding state
[  114.840422][ T7685] 8021q: adding VLAN 0 to HW filter on device bond1
[  114.843113][ T7685] bridge0: port 3(bond1) entered blocking state
[  114.845990][ T7685] bridge0: port 3(bond1) entered disabled state
[  114.849689][ T7685] bond1: entered allmulticast mode
[  114.859950][ T7685] bond1: entered promiscuous mode
[  114.865154][ T7685] bridge0: port 3(bond1) entered blocking state
[  114.868279][ T7685] bridge0: port 3(bond1) entered forwarding state
[  114.933251][ T7693] xt_l2tp: v2 sid > 0xffff: 33554432
[  114.966462][ T7697] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  114.970318][ T7697] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  114.996581][ T7699] tipc: Enabling of bearer <h:gr> rejected, media not registered
[  115.007846][ T7699] tipc: Enabling of bearer <h:gr> rejected, media not registered
[  115.071400][ T7704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.432971][ T5992] bridge0: port 3(bond1) entered disabled state
[  115.485637][ T7733] xt_cgroup: invalid path, errno=-2
[  115.799116][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.547168][ T7895] __nla_validate_parse: 29 callbacks suppressed
[  117.547179][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'.
[  117.582931][ T7897] netlink: 'syz.0.571': attribute type 13 has an invalid length.
[  117.638966][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  118.246358][ T7939] GUP no longer grows the stack in syz.1.583 (7939): 200000003000-20000000a000 (200000001000)
[  118.251881][ T7939] CPU: 0 UID: 0 PID: 7939 Comm: syz.1.583 Not tainted syzkaller #0 PREEMPT(full) 
[  118.251893][ T7939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.251901][ T7939] Call Trace:
[  118.251905][ T7939]  <TASK>
[  118.251909][ T7939]  dump_stack_lvl+0xe8/0x150
[  118.251925][ T7939]  __get_user_pages+0x238c/0x2720
[  118.251947][ T7939]  ? down_read_killable+0x1bb/0x340
[  118.251962][ T7939]  __gup_longterm_locked+0xd52/0x15c0
[  118.251974][ T7939]  ? lock_acquire+0x106/0x350
[  118.251991][ T7939]  gup_fast_fallback+0x1d82/0x20d0
[  118.252015][ T7939]  ? __pfx_gup_fast_fallback+0x10/0x10
[  118.252045][ T7939]  ? check_preemption_disabled+0x5/0xe0
[  118.252055][ T7939]  ? is_valid_gup_args+0x11f/0x200
[  118.252066][ T7939]  ? get_user_pages_fast+0x4d/0xb0
[  118.252077][ T7939]  __iov_iter_get_pages_alloc+0x378/0xa40
[  118.252089][ T7939]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  118.252100][ T7939]  iov_iter_get_pages2+0x5e/0xa0
[  118.252110][ T7939]  __se_sys_vmsplice+0x7b5/0x1660
[  118.252126][ T7939]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  118.252133][ T7939]  ? __pfx_futex_wait+0x10/0x10
[  118.252146][ T7939]  ? userfaultfd_unmap_complete+0x292/0x310
[  118.252167][ T7939]  ? up_write+0x1a6/0x410
[  118.252180][ T7939]  ? ksys_write+0xf8/0x270
[  118.252195][ T7939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.252203][ T7939]  do_syscall_64+0x174/0x580
[  118.252213][ T7939]  ? trace_irq_disable+0x3b/0x140
[  118.252224][ T7939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.252232][ T7939] RIP: 0033:0x7fc0df39e159
[  118.252240][ T7939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.252246][ T7939] RSP: 002b:00007fc0e024d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  118.252255][ T7939] RAX: ffffffffffffffda RBX: 00007fc0df625fa0 RCX: 00007fc0df39e159
[  118.252261][ T7939] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000047
[  118.252265][ T7939] RBP: 00007fc0df43506b R08: 0000000000000000 R09: 0000000000000000
[  118.252270][ T7939] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  118.252274][ T7939] R13: 00007fc0df626038 R14: 00007fc0df625fa0 R15: 00007fffb1376468
[  118.252287][ T7939]  </TASK>
[  118.336811][ T7934] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  118.440958][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.585'.
[  118.509895][ T7958] netlink: 'syz.1.587': attribute type 1 has an invalid length.
[  118.517446][ T7958] netlink: 'syz.1.587': attribute type 1 has an invalid length.
[  118.522439][ T7958] netlink: 'syz.1.587': attribute type 2 has an invalid length.
[  118.749693][ T7973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'.
[  119.224322][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.602'.
[  119.814503][ T8053] netlink: 'syz.1.615': attribute type 11 has an invalid length.
[  119.817985][ T8051] netlink: 72 bytes leftover after parsing attributes in process `syz.2.613'.
[  119.837109][ T8061] netlink: 72 bytes leftover after parsing attributes in process `syz.2.613'.
[  119.852581][ T8055] syzkaller0: entered promiscuous mode
[  119.854267][ T8055] syzkaller0: entered allmulticast mode
[  119.925769][ T8063] netlink: 'syz.1.616': attribute type 5 has an invalid length.
[  120.097865][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.109482][ T8071] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  120.131505][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'.
[  120.166960][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'.
[  120.243815][ T8079] netlink: 'syz.1.622': attribute type 1 has an invalid length.
[  120.319260][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.335727][ T8089] macvlan2: entered promiscuous mode
[  120.337987][ T8089] macvlan2: entered allmulticast mode
[  120.340764][ T8089] bond0: entered allmulticast mode
[  120.342932][ T8089] bond0: entered promiscuous mode
[  120.345805][ T8089] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  120.353645][ T8089] team0: Port device macvlan2 added
[  120.396085][ T8079] bond0: (slave ip6gretap1): making interface the new active one
[  120.403992][ T8079] ip6gretap1: entered promiscuous mode
[  120.406554][ T8079] ip6gretap1: entered allmulticast mode
[  120.413539][ T8079] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  120.420021][ T8092] syzkaller0: entered promiscuous mode
[  120.424647][ T8092] syzkaller0: entered allmulticast mode
[  120.559153][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'.
[  120.574092][ T8102] openvswitch: netlink: Message has 6173 unknown bytes.
[  120.577214][ T8102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.738499][ T8113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.629'.
[  121.102856][ T8156] Bluetooth: hci0: unsupported parameter 5135
[  121.108980][ T8156] Bluetooth: hci0: unsupported parameter 8192
[  121.113408][ T8156] Bluetooth: hci0: unsupported parameter 5135
[  121.116852][ T8156] Bluetooth: hci0: unsupported parameter 8192
[  121.923007][ T8182] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  122.664059][ T8245] netlink: 'syz.2.666': attribute type 3 has an invalid length.
[  122.669911][ T8245] netlink: 'syz.2.666': attribute type 3 has an invalid length.
[  122.713307][ T8250] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  122.716958][ T8250] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  122.721424][ T8250] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  122.724860][ T8250] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  122.728293][ T8250] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  122.731807][ T8250] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  122.735392][ T8250] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  122.738757][ T8250] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  122.742381][ T8250] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  122.772329][ T8250] netlink: 'syz.1.668': attribute type 15 has an invalid length.
[  122.814467][ T8250] netlink: 'syz.1.668': attribute type 15 has an invalid length.
[  122.814498][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  122.822815][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  122.831099][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  122.841610][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  123.022399][ T8275] __nla_validate_parse: 41 callbacks suppressed
[  123.022420][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'.
[  123.155619][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'.
[  123.164279][ T8286] netlink: 36 bytes leftover after parsing attributes in process `syz.2.680'.
[  123.208093][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'.
[  123.751314][ T8313] SET target dimension over the limit!
[  123.815429][ T8317] netlink: 68 bytes leftover after parsing attributes in process `syz.1.691'.
[  123.815814][ T8318] netlink: 68 bytes leftover after parsing attributes in process `syz.1.691'.
[  123.995340][ T8328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.695'.
[  123.999430][ T8328] netlink: 32 bytes leftover after parsing attributes in process `syz.1.695'.
[  124.003337][ T8328] netlink: 32 bytes leftover after parsing attributes in process `syz.1.695'.
[  124.213415][ T8337] netlink: 72 bytes leftover after parsing attributes in process `syz.0.697'.
[  125.282209][ T8366] xt_recent: Unsupported userspace flags (000000c5)
[  126.039228][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  127.046323][ T8330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.314518][ T8401] syzkaller0: entered promiscuous mode
[  127.324761][ T8401] syzkaller0: entered allmulticast mode
[  127.527519][ T8427] sctp: [Deprecated]: syz.1.722 (pid 8427) Use of int in max_burst socket option deprecated.
[  127.527519][ T8427] Use struct sctp_assoc_value instead
[  128.033822][ T8465] __nla_validate_parse: 11 callbacks suppressed
[  128.033835][ T8465] netlink: 44 bytes leftover after parsing attributes in process `syz.2.733'.
[  128.045368][ T8465] netlink: 44 bytes leftover after parsing attributes in process `syz.2.733'.
[  128.115835][   T33] net_ratelimit: 45 callbacks suppressed
[  128.115856][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.124409][ T8471] netlink: 'syz.0.734': attribute type 3 has an invalid length.
[  128.133868][ T8471] netlink: 'syz.0.734': attribute type 3 has an invalid length.
[  128.287346][ T8491] netlink: 268 bytes leftover after parsing attributes in process `syz.1.738'.
[  128.305975][ T8491] netlink: 248 bytes leftover after parsing attributes in process `syz.1.738'.
[  128.328139][ T8488] syzkaller0: entered promiscuous mode
[  128.330446][ T8488] syzkaller0: entered allmulticast mode
[  128.999166][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.282715][ T8525] veth1_to_bond: entered allmulticast mode
[  130.335283][ T8515] veth1_to_bond: left allmulticast mode
[  130.483362][ T8543] netlink: 36 bytes leftover after parsing attributes in process `syz.1.754'.
[  130.497797][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'.
[  130.505070][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'.
[  130.509460][ T8545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.753'.
[  130.554154][ T8554] tc_dump_action: action bad kind
[  130.971104][ T8570] netlink: 'syz.0.760': attribute type 1 has an invalid length.
[  131.031979][ T8573] netlink: 104 bytes leftover after parsing attributes in process `syz.0.761'.
[  131.189250][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'.
[  133.080820][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  133.471745][ T8543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  133.612103][ T8593] __nla_validate_parse: 1 callbacks suppressed
[  133.612113][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'.
[  133.692955][ T5991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.702296][ T5991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.710025][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.729964][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.786665][ T8605] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  133.797721][ T8605] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  133.814176][ T8605] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  133.827963][ T8616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.773'.
[  133.849400][ T8605] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  133.881789][ T8605] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98
[  133.930860][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'.
[  133.947492][ T8624] netlink: 128 bytes leftover after parsing attributes in process `syz.0.775'.
[  134.023753][ T8627] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  134.030666][ T8626] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  134.042290][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'.
[  134.045938][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'.
[  134.255510][ T8645] netlink: 'syz.0.779': attribute type 1 has an invalid length.
[  134.292368][ T8645] 8021q: adding VLAN 0 to HW filter on device bond2
[  134.324316][ T8645] bond2: (slave syz_tun): Enslaving as a backup interface with an up link
[  134.575908][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'.
[  134.624427][ T8659] netlink: 'syz.2.784': attribute type 29 has an invalid length.
[  134.638652][ T8663] netlink: 'syz.2.784': attribute type 29 has an invalid length.
[  134.825898][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'.
[  134.866950][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.870034][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.880021][ T8679] netlink: 'syz.1.787': attribute type 3 has an invalid length.
[  134.892208][ T8679] netlink: 'syz.1.787': attribute type 3 has an invalid length.
[  135.047666][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'.
[  135.334634][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'.
[  136.131312][ T1212] wlan1: Trigger new scan to find an IBSS to join
[  137.829479][ T8680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  139.166151][   T87] wlan1: Trigger new scan to find an IBSS to join
[  139.243762][ T8750] __nla_validate_parse: 1 callbacks suppressed
[  139.243776][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'.
[  139.249934][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'.
[  139.253781][ T8750] netlink: 'syz.2.807': attribute type 15 has an invalid length.
[  139.273300][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'.
[  139.274365][ T5659] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  139.280079][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'.
[  139.282858][ T5659] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  139.287057][ T5659] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  139.290843][ T8750] netlink: 'syz.2.807': attribute type 15 has an invalid length.
[  139.290883][ T5659] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  139.318716][ T5659] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0
[  139.323898][ T5659] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0
[  139.329266][ T5659] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0
[  139.337706][ T5659] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0
[  139.405493][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'.
[  139.683469][ T8771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.815'.
[  139.689666][ T8771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.815'.
[  139.748391][ T8780] ip_tables: iptables: counters copy to user failed while replacing table
[  139.836872][ T8783] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  139.854980][ T8783] batman_adv: batadv0: Adding interface: gretap2
[  139.861111][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'.
[  139.861137][ T8783] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.868890][ T8786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.821'.
[  139.878703][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'.
[  139.882326][ T8783] batman_adv: batadv0: Interface activated: gretap2
[  140.219515][ T8820] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[  140.227208][ T8820] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[  140.231984][ T8820] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[  140.234726][ T8820] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[  140.239852][ T8820] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[  140.244396][ T8820] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[  140.248549][ T8820] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[  140.253709][ T8820] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[  140.260330][ T8820] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[  140.417225][ T8838] gretap0: entered promiscuous mode
[  140.814376][ T5991] tipc: Resetting bearer <eth:ipvlan1>
[  141.031071][ T8875] syzkaller1: entered promiscuous mode
[  141.036489][ T8875] syzkaller1: entered allmulticast mode
[  141.071032][ T8865] nbd0: detected capacity change from 0 to 63
[  141.076329][   T57] block nbd0: Receive control failed (result -32)
[  141.086072][ T5610] block nbd0: Dead connection, failed to find a fallback
[  141.089074][ T5610] block nbd0: shutting down sockets
[  141.091683][ T5610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.095962][ T5610] Buffer I/O error on dev nbd0, logical block 0, async page read
[  141.098730][ T5610] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.102206][ T5610] Buffer I/O error on dev nbd0, logical block 1, async page read
[  141.105317][ T5610] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.108240][ T5610] Buffer I/O error on dev nbd0, logical block 2, async page read
[  141.112790][ T5610] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.115636][ T5610] Buffer I/O error on dev nbd0, logical block 3, async page read
[  141.124810][ T5610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.134429][ T5349] veth1_vlan: left promiscuous mode
[  141.136801][ T5610] Buffer I/O error on dev nbd0, logical block 0, async page read
[  141.142217][ T5610] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.154296][ T5610] Buffer I/O error on dev nbd0, logical block 1, async page read
[  141.166592][ T5610] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.176127][ T5610] Buffer I/O error on dev nbd0, logical block 2, async page read
[  141.185540][ T5610] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.192757][ T5610] Buffer I/O error on dev nbd0, logical block 3, async page read
[  141.195841][ T5610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.198598][ T5610] Buffer I/O error on dev nbd0, logical block 0, async page read
[  141.201357][ T5610] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.204740][ T5610] Buffer I/O error on dev nbd0, logical block 1, async page read
[  141.215691][ T5610] ldm_validate_partition_table(): Disk read failed.
[  141.223882][ T5610] Dev nbd0: unable to read RDB block 0
[  141.227269][ T5610]  nbd0: unable to read partition table
[  141.235799][ T5610] ldm_validate_partition_table(): Disk read failed.
[  141.241835][ T5610] Dev nbd0: unable to read RDB block 0
[  141.244985][ T5610]  nbd0: unable to read partition table
[  141.294005][ T8884] syzkaller0: entered promiscuous mode
[  141.295798][ T8884] syzkaller0: entered allmulticast mode
[  141.304551][ T8883] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.377467][ T8885] veth1_vlan: entered promiscuous mode
[  141.393310][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.645289][ T8922] xt_l2tp: wrong L2TP version: 0
[  142.051017][ T8940] syzkaller1: entered promiscuous mode
[  142.053557][ T8940] syzkaller1: entered allmulticast mode
[  142.064520][ T8882] tipc: Resetting bearer <eth:syzkaller0>
[  142.102537][ T8882] tipc: Disabling bearer <eth:syzkaller0>
[  142.109789][ T8940] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  142.119170][ T5661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.122885][   T46] wlan1: Trigger new scan to find an IBSS to join
[  142.679001][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  143.081020][   T87] wlan1: Creating new IBSS network, BSSID 36:61:63:62:77:3d
[  144.041145][ T9090] x_tables: unsorted entry at hook 4
[  144.163001][ T9097] syzkaller1: entered promiscuous mode
[  144.166066][ T9097] syzkaller1: entered allmulticast mode
[  144.357266][ T9120] __nla_validate_parse: 41 callbacks suppressed
[  144.357287][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'.
[  144.373811][ T9122] xt_l2tp: v2 doesn't support IP mode
[  144.452717][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'.
[  144.575136][ T9131] macsec1: entered promiscuous mode
[  144.579312][ T9131] macsec1: entered allmulticast mode
[  144.677127][ T9144] validate_nla: 122 callbacks suppressed
[  144.677145][ T9144] netlink: 'syz.1.920': attribute type 10 has an invalid length.
[  144.691016][ T9144] syz_tun: entered promiscuous mode
[  144.711918][ T5661] s`z1: Port: 1 Link DOWN
[  145.103845][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'.
[  145.453416][ T9194] netlink: 128 bytes leftover after parsing attributes in process `syz.2.933'.
[  145.538624][ T9196] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.934'.
[  145.589193][ T9204] pim6reg1: entered promiscuous mode
[  145.591713][ T9204] pim6reg1: entered allmulticast mode
[  145.894804][ T9222] tipc: Enabled bearer <eth:vlan0>, priority 30
[  146.042012][ T9229] syzkaller0: entered promiscuous mode
[  146.046121][ T9229] syzkaller0: entered allmulticast mode
[  146.248311][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.946'.
[  146.280607][ T9239] Bluetooth: hci0: unsupported parameter 5135
[  146.283374][ T9239] Bluetooth: hci0: unsupported parameter 8192
[  146.286489][ T9239] Bluetooth: hci0: unsupported parameter 5135
[  146.291728][ T9239] Bluetooth: hci0: unsupported parameter 8192
[  146.385610][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'.
[  146.856355][ T9279] netlink: 'syz.1.961': attribute type 11 has an invalid length.
[  146.976088][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'.
[  146.983338][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'.
[  147.009080][ T9284] netlink: 'syz.2.963': attribute type 11 has an invalid length.
[  147.103115][ T9298] netlink: 'syz.1.968': attribute type 11 has an invalid length.
[  147.119155][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  147.127370][ T9298] 0: reclassify loop, rule prio 0, protocol 800
[  147.170322][ T9301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.971'.
[  147.247437][ T9310] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  147.306296][ T9314] netlink: 'syz.0.975': attribute type 21 has an invalid length.
[  147.313689][ T9318] netlink: 'syz.0.975': attribute type 21 has an invalid length.
[  147.493452][ T9326] syz_tun: left promiscuous mode
[  147.567057][ T9326] virt_wifi0: entered promiscuous mode
[  147.587143][ T9326] virt_wifi0: entered allmulticast mode
[  147.590257][ T9326] macsec1: left promiscuous mode
[  147.593561][ T5668] s`z1: Port: 1 Link ACTIVE
[  147.689448][  T802] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  147.929343][ T9361] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[  150.543511][ T9332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  150.721539][ T9372] x_tables: duplicate underflow at hook 1
[  150.752053][ T9372] __nla_validate_parse: 5 callbacks suppressed
[  150.752066][ T9372] netlink: 128 bytes leftover after parsing attributes in process `syz.0.984'.
[  150.855138][ T9385] netlink: 88 bytes leftover after parsing attributes in process `syz.0.988'.
[  150.928486][ T9391] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  151.107222][ T9390] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  151.349102][ T9405] netlink: 64 bytes leftover after parsing attributes in process `syz.0.995'.
[  151.571572][ T9408] tap0: tun_chr_ioctl cmd 2148553947
[  151.670292][ T9410] netem: change failed
[  152.045102][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'.
[  152.063274][ T9429] netlink: 'syz.1.1002': attribute type 4 has an invalid length.
[  152.179277][ T9433] Bluetooth: MGMT ver 1.23
[  152.289814][ T9449] netlink: 'syz.1.1007': attribute type 16 has an invalid length.
[  152.295502][ T9449] netlink: 'syz.1.1007': attribute type 17 has an invalid length.
[  152.384977][ T9449] veth3: left allmulticast mode
[  152.398494][ T9449] macsec1: left allmulticast mode
[  152.402401][ T9449] virt_wifi0: left allmulticast mode
[  152.411151][ T9453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1008'.
[  153.136498][ T9493] netlink: 'syz.0.1015': attribute type 1 has an invalid length.
[  153.143491][ T9493] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1015'.
[  153.157915][ T9493] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  153.174023][ T9498] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1016'.
[  153.180326][ T9496] can: request_module (can-proto-0) failed.
[  153.190037][ T9493] netlink: 'syz.0.1015': attribute type 1 has an invalid length.
[  153.193224][ T9493] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1015'.
[  153.197135][ T9493] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  153.210864][ T9493] netlink: 'syz.0.1015': attribute type 1 has an invalid length.
[  153.232649][ T9493] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1015'.
[  153.266861][ T9493] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  154.933368][ T9607] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1040'.
[  155.285770][ T9638] syzkaller1: entered promiscuous mode
[  155.288376][ T9638] syzkaller1: entered allmulticast mode
[  155.351333][ T9635] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  155.364706][ T9635] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  155.373322][ T9635] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  155.663475][ T9652] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  155.673760][ T9652] bond3 (unregistering): Released all slaves
[  155.688992][ T9655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.957903][ T9669] __nla_validate_parse: 70 callbacks suppressed
[  155.957921][ T9669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1056'.
[  155.966627][ T9672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1056'.
[  156.089476][ T9677] netlink: 'syz.2.1057': attribute type 6 has an invalid length.
[  156.091964][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'.
[  156.100486][ T9677] netlink: 'syz.2.1057': attribute type 1 has an invalid length.
[  156.104345][ T9677] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1057'.
[  156.128749][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'.
[  156.272725][ T9696] x_tables: duplicate underflow at hook 1
[  156.288679][ T9696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.493145][   T33] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  156.501810][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.019400][ T5681] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  157.084094][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'.
[  157.153419][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'.
[  157.257145][ T9743] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1081'.
[  157.269383][ T9744] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1080'.
[  157.450049][ T9757] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1086'.
[  157.559475][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.686652][ T9850] netlink: 'syz.0.1115': attribute type 4 has an invalid length.
[  159.715253][ T9894] xt_ipcomp: unknown flags 1D
[  159.992345][ T9917] syzkaller0: entered promiscuous mode
[  159.999050][ T9917] syzkaller0: entered allmulticast mode
[  160.271173][ T9931] syzkaller0: entered promiscuous mode
[  160.276115][ T9931] syzkaller0: entered allmulticast mode
[  160.805217][ T9983] syzkaller0: entered promiscuous mode
[  160.808328][ T9983] syzkaller0: entered allmulticast mode
[  160.963317][ T9991] __nla_validate_parse: 12 callbacks suppressed
[  160.963336][ T9991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1145'.
[  161.119573][T10002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1152'.
[  161.448050][T10015] netlink: 'syz.2.1156': attribute type 1 has an invalid length.
[  161.466659][T10015] 8021q: adding VLAN 0 to HW filter on device bond4
[  161.490834][T10015] bond4: (slave geneve3): making interface the new active one
[  161.497394][T10015] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  161.519219][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1157'.
[  161.539903][T10015] syz.2.1156 (10015) used greatest stack depth: 19424 bytes left
[  161.587559][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'.
[  161.696796][T10018] virtio_blk virtio1: 1/0/0 default/read/poll queues
[  161.702649][T10018] virtio_blk virtio1: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  161.831390][T10035] Cannot find set identified by id 0 to match
[  162.246531][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'.
[  162.275558][T10049] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  162.454780][T10054] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1163'.
[  164.820139][T10035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  165.115721][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'.
[  165.771781][T10105] infiniband syz0: set active
[  165.774735][T10105] infiniband syz0: added bond0
[  165.797155][T10105] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  165.804717][T10105] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  165.811883][T10105] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  165.836991][T10105] RDS/IB: syz0: added
[  165.843471][T10105] smc: adding ib device syz0 with port count 1
[  165.846140][T10105] smc:    ib device syz0 port 1 has no pnetid
[  166.135912][T10135] tc_dump_action: action bad kind
[  166.641634][T10151] netlink: 'syz.0.1188': attribute type 12 has an invalid length.
[  166.649087][T10151] netlink: 'syz.0.1188': attribute type 29 has an invalid length.
[  166.652622][T10151] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1188'.
[  166.656505][T10151] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1188'.
[  166.661592][T10151] netlink: 'syz.0.1188': attribute type 12 has an invalid length.
[  166.665090][T10151] netlink: 'syz.0.1188': attribute type 29 has an invalid length.
[  166.668422][T10151] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1188'.
[  166.673320][T10151] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1188'.
[  166.682712][T10151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1188'.
[  167.007152][T10169] syzkaller0: entered promiscuous mode
[  167.013755][T10169] syzkaller0: entered allmulticast mode
[  167.030631][T10169] xt_CT: You must specify a L4 protocol and not use inversions on it
[  167.624472][T10183] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1202'.
[  167.636763][T10183] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1202'.
[  167.848628][T10194] x_tables: duplicate underflow at hook 1
[  167.851569][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'.
[  167.855668][T10194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1206'.
[  168.364366][T10225] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1215'.
[  169.273210][T10287] netlink: 'syz.0.1235': attribute type 1 has an invalid length.
[  169.564996][T10306] tipc: Started in network mode
[  169.578440][T10306] tipc: Node identity 785634120000000021436587, cluster identity 4711
[  169.641879][T10310] netlink: 'syz.1.1240': attribute type 12 has an invalid length.
[  170.362036][T10349] 8021q: adding VLAN 0 to HW filter on device bond3
[  170.373066][   T13] netdevsim netdevsim2 netdevsim0: set [0, 2] type 1 family 0 port 8472 - 0
[  170.378460][   T13] netdevsim netdevsim2 netdevsim1: set [0, 2] type 1 family 0 port 8472 - 0
[  170.387917][   T13] netdevsim netdevsim2 netdevsim2: set [0, 2] type 1 family 0 port 8472 - 0
[  170.403652][   T13] netdevsim netdevsim2 netdevsim3: set [0, 2] type 1 family 0 port 8472 - 0
[  170.428435][T10364] netlink: 'syz.1.1252': attribute type 7 has an invalid length.
[  173.264308][T10352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  173.452385][T10416] __nla_validate_parse: 6 callbacks suppressed
[  173.452403][T10416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1257'.
[  173.706752][T10428] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1261'.
[  173.724584][T10428] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  174.039951][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.042565][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  174.052702][   T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.056733][   T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.061563][   T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.065045][   T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.384383][T10448] netlink: 'syz.1.1268': attribute type 10 has an invalid length.
[  174.387856][T10448] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1268'.
[  174.526151][T10463] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1273'.
[  174.565955][T10466] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1274'.
[  175.239334][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.244454][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.250167][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.253837][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.810849][   T87] net_ratelimit: 3 callbacks suppressed
[  179.810860][   T87] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.815899][   T87] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.818435][   T87] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.821086][   T87] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.440069][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.444954][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.243479][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  182.289142][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.559868][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.562700][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.565578][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.568517][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.319223][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.322980][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.402091][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.406388][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.624138][T10476] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1275'.
[  189.752135][T10488] syzkaller0: entered promiscuous mode
[  189.759005][T10488] syzkaller0: entered allmulticast mode
[  190.450470][T10527] netlink: 564 bytes leftover after parsing attributes in process `syz.0.1283'.
[  190.537896][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'.
[  190.575662][T10534] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1285'.
[  190.669975][T10538] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1287'.
[  190.680591][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.684046][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.687405][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.690747][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.756314][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'.
[  190.915222][T10547] 0: reclassify loop, rule prio 0, protocol 03
[  191.065684][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'.
[  191.070545][T10554] veth0: entered promiscuous mode
[  191.072967][T10554] veth0: left promiscuous mode
[  191.363212][T10569] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1298'.
[  191.540824][T10582] x_tables: unsorted underflow at hook 1
[  191.565640][T10582] tc action pedit 'at' offset 5 out of bounds
[  191.570318][T10582] tc action pedit 'at' offset 5 out of bounds
[  191.573035][T10582] tc action pedit 'at' offset 5 out of bounds
[  191.575716][T10582] tc action pedit 'at' offset 5 out of bounds
[  191.578323][T10582] tc action pedit 'at' offset 5 out of bounds
[  191.581178][T10582] tc action pedit 'at' offset 5 out of bounds
[  191.583886][T10582] tc action pedit 'at' offset 5 out of bounds
[  191.586547][T10582] tc action pedit 'at' offset 5 out of bounds
[  191.589400][T10582] tc action pedit 'at' offset 5 out of bounds
[  191.592061][T10582] tc action pedit 'at' offset 5 out of bounds
[  191.594696][T10582] 0: reclassify loop, rule prio 0, protocol 800
[  191.760433][T10598] netlink: 'syz.0.1305': attribute type 1 has an invalid length.
[  191.997693][T10623] Bluetooth: hci0: unsupported parameter 5135
[  192.009914][T10623] Bluetooth: hci0: invalid len left 4, exp >= 20
[  192.026553][T10624] Bluetooth: hci0: unsupported parameter 5135
[  192.030748][T10624] Bluetooth: hci0: invalid len left 4, exp >= 20
[  192.100389][T10631] ip6t_rpfilter: unknown options
[  192.343438][T10633] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  192.357671][T10633] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1314'.
[  192.651248][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'.
[  192.741386][T10658] vxcan3: entered allmulticast mode
[  192.756512][T10658] vxcan5: entered allmulticast mode
[  192.794356][T10658] vxcan7: entered allmulticast mode
[  192.809531][T10658] vxcan9: entered allmulticast mode
[  192.827200][T10658] vxcan11: entered allmulticast mode
[  192.835686][T10658] vxcan13: entered allmulticast mode
[  192.844456][T10658] vxcan15: entered allmulticast mode
[  192.859197][T10658] vxcan17: entered allmulticast mode
[  192.870089][T10658] vxcan19: entered allmulticast mode
[  192.883418][T10658] vxcan21: entered allmulticast mode
[  192.896833][T10658] vxcan23: entered allmulticast mode
[  192.905252][T10658] vxcan25: entered allmulticast mode
[  192.915607][T10658] vxcan27: entered allmulticast mode
[  192.924080][T10658] vxcan29: entered allmulticast mode
[  192.933037][T10658] vxcan31: entered allmulticast mode
[  192.952357][T10658] vxcan33: entered allmulticast mode
[  192.979972][T10658] vxcan35: entered allmulticast mode
[  192.994945][T10658] vxcan37: entered allmulticast mode
[  193.016302][T10658] vxcan39: entered allmulticast mode
[  193.027114][T10658] vxcan41: entered allmulticast mode
[  193.037116][T10679] vlan2: entered promiscuous mode
[  193.063062][T10658] vxcan43: entered allmulticast mode
[  193.071290][T10658] vxcan45: entered allmulticast mode
[  193.073433][T10682] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  193.085645][T10658] vxcan47: entered allmulticast mode
[  193.096203][T10658] vxcan49: entered allmulticast mode
[  193.104445][T10658] vxcan51: entered allmulticast mode
[  193.112240][T10658] vxcan53: entered allmulticast mode
[  193.120688][T10658] vxcan55: entered allmulticast mode
[  193.128673][T10658] vxcan57: entered allmulticast mode
[  193.138444][T10658] vxcan59: entered allmulticast mode
[  193.147195][T10658] vxcan61: entered allmulticast mode
[  193.164145][T10658] vxcan63: entered allmulticast mode
[  193.178702][T10658] vxcan65: entered allmulticast mode
[  193.191877][T10658] vxcan67: entered allmulticast mode
[  193.211410][T10658] vxcan69: entered allmulticast mode
[  193.260725][T10658] vxcan71: entered allmulticast mode
[  193.270339][T10658] vxcan73: entered allmulticast mode
[  193.279498][T10658] vxcan75: entered allmulticast mode
[  193.287669][T10658] vxcan77: entered allmulticast mode
[  193.303674][T10658] vxcan79: entered allmulticast mode
[  193.314020][T10658] vxcan81: entered allmulticast mode
[  193.325411][T10658] vxcan83: entered allmulticast mode
[  193.334362][T10658] vxcan85: entered allmulticast mode
[  193.347999][T10700] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  193.350553][T10658] vxcan87: entered allmulticast mode
[  193.364054][T10658] vxcan89: entered allmulticast mode
[  193.377151][T10658] vxcan91: entered allmulticast mode
[  193.394265][T10658] vxcan93: entered allmulticast mode
[  193.430837][T10658] vxcan95: entered allmulticast mode
[  193.465652][T10658] vxcan97: entered allmulticast mode
[  193.477334][T10658] vxcan99: entered allmulticast mode
[  193.489425][T10658] vxcan101: entered allmulticast mode
[  193.617458][T10721] syzkaller0: entered promiscuous mode
[  193.624636][T10721] syzkaller0: entered allmulticast mode
[  194.193632][T10766] netlink: 'syz.0.1353': attribute type 1 has an invalid length.
[  194.439143][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.522358][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  194.631895][T10786] __nla_validate_parse: 61 callbacks suppressed
[  194.631910][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1359'.
[  194.688453][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'.
[  195.190073][T10846] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  195.412983][T10859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1367'.
[  195.422378][T10859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1367'.
[  195.677702][T10889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1372'.
[  195.681146][T10889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1372'.
[  195.800819][   T87] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.803635][   T87] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.806465][   T87] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.809722][   T87] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.835946][T10889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1372'.
[  195.840861][T10889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1372'.
[  195.912431][T10889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1372'.
[  195.926383][T10903] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1375'.
[  195.964781][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.968085][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.971526][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.043997][T10889] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  196.082420][T10904] netlink: 'syz.1.1373': attribute type 3 has an invalid length.
[  196.086460][T10904] netlink: 'syz.1.1373': attribute type 3 has an invalid length.
[  196.161041][T10910] syzkaller0: entered promiscuous mode
[  196.163369][T10910] syzkaller0: entered allmulticast mode
[  196.183125][T10910] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress)
[  196.555998][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.559486][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  196.562755][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.195398][T10962] netlink: 'syz.0.1390': attribute type 21 has an invalid length.
[  197.199052][T10962] syzkaller0: entered promiscuous mode
[  197.201057][T10962] syzkaller0: entered allmulticast mode
[  197.392924][T10969] netlink: 'syz.0.1392': attribute type 1 has an invalid length.
[  197.396293][T10969] netlink: 'syz.0.1392': attribute type 2 has an invalid length.
[  197.400002][T10969] netlink: 'syz.0.1392': attribute type 2 has an invalid length.
[  197.403370][T10969] netlink: 'syz.0.1392': attribute type 1 has an invalid length.
[  197.406742][T10969] netlink: 'syz.0.1392': attribute type 1 has an invalid length.
[  197.412381][T10969] netlink: 'syz.0.1392': attribute type 1 has an invalid length.
[  199.619394][T11061] IPVS: Unknown mcast interface: vcan0
[  199.649138][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  199.714255][T11073] __nla_validate_parse: 14 callbacks suppressed
[  199.714270][T11073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1422'.
[  199.741835][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1422'.
[  199.776141][T11081] netlink: 'syz.2.1424': attribute type 1 has an invalid length.
[  199.792575][T11084] netlink: 'syz.0.1425': attribute type 32 has an invalid length.
[  199.797423][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'.
[  199.806012][T11081] netlink: 'syz.2.1424': attribute type 1 has an invalid length.
[  199.815921][T11084] bond3: Setting coupled_control to off (0)
[  199.822736][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'.
[  199.843532][T11095] bond4: option coupled_control: invalid value (20)
[  199.851888][T11095] bond4 (unregistering): Released all slaves
[  199.912083][T11102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1428'.
[  199.918310][T11102] xt_TCPMSS: Only works on TCP SYN packets
[  200.043650][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'.
[  200.176942][T11132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1435'.
[  200.271049][T11144] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1436'.
[  200.662787][T11169] netdevsim netdevsim2: Direct firmware load for . failed with error -2
[  200.666757][T11169] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  201.204633][ T5607] Bluetooth: hci2: link tx timeout
[  201.207345][ T5607] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  201.214236][ T5607] Bluetooth: hci2: link tx timeout
[  201.216807][ T5607] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  201.562008][   T83] net_ratelimit: 5 callbacks suppressed
[  201.562020][   T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.566520][   T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.569129][   T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.572138][   T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.593964][T11212] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1444'.
[  201.724423][T11223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1447'.
[  201.754464][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.757111][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.759763][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.802699][T11223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  202.080921][T11245] tipc: Enabled bearer <eth:vxcan1>, priority 0
[  202.087296][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.092406][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.101451][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.109393][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.113278][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.116889][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.123651][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.127307][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.131806][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.135111][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.138014][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.142033][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.145502][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.150558][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.154209][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.158480][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.184333][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.188130][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.193153][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.196527][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.200714][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.203548][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.206849][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.210407][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.213087][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.216361][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.220066][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.222928][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.225933][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.231112][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.234433][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.239594][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.243463][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.249684][T11245] tipc: Enabling of bearer <eth:vxcan1> rejected, already enabled
[  202.461736][T11266] wg1: entered promiscuous mode
[  202.476488][T11266] validate_nla: 5 callbacks suppressed
[  202.476501][T11266] netlink: 'syz.1.1460': attribute type 1 has an invalid length.
[  203.201811][ T9349] tipc: Node number set to 1494569365
[  203.238973][ T5607] Bluetooth: hci2: command 0x0405 tx timeout
[  203.613826][T11322] xt_hashlimit: size too large, truncated to 1048576
[  203.814750][T11331] nbd: must specify at least one socket
[  203.830632][T11331] batman_adv: batadv0: Adding interface: syzkaller0
[  203.833444][T11331] batman_adv: batadv0: Interface activated: syzkaller0
[  203.853526][T11330] batman_adv: batadv0: Interface deactivated: syzkaller0
[  203.881571][T11330] batman_adv: batadv0: Removing interface: syzkaller0
[  204.141291][T11360] syzkaller0: entered promiscuous mode
[  204.143173][T11360] syzkaller0: entered allmulticast mode
[  204.321885][T11374] xt_TPROXY: Can be used only with -p tcp or -p udp
[  204.393610][T11384] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  205.381945][T11399] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  205.452323][T11412] __nla_validate_parse: 10 callbacks suppressed
[  205.452334][T11412] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1500'.
[  205.502817][T11414] netlink: 'syz.1.1501': attribute type 14 has an invalid length.
[  205.741100][T11429] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1502'.
[  206.194134][T11443] 8021q: adding VLAN 0 to HW filter on device bond3
[  206.201376][T11441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1509'.
[  206.225036][T11443] netlink: 'syz.1.1510': attribute type 3 has an invalid length.
[  206.229183][T11443] netlink: 'syz.1.1510': attribute type 3 has an invalid length.
[  206.417025][T11450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.438569][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'.
[  206.526496][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'.
[  206.571609][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'.
[  206.655426][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1521'.
[  206.662381][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1521'.
[  206.666224][T11477] block nbd1: Unsupported socket: should be TCP or UNIX.
[  207.490783][T11509] syzkaller0: entered promiscuous mode
[  207.499405][T11509] syzkaller0: entered allmulticast mode
[  207.550842][T11509] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1529'.
[  207.554129][T11509] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1529'.
[  207.594861][T11518] syzkaller0: entered promiscuous mode
[  207.601325][T11518] syzkaller0: entered allmulticast mode
[  207.758536][T11526] netlink: 'syz.1.1534': attribute type 21 has an invalid length.
[  208.035223][T11542] xt_cgroup: path and classid specified
[  208.204907][T11557] 8021q: adding VLAN 0 to HW filter on device bond5
[  208.230625][T11557] netlink: 'syz.2.1543': attribute type 3 has an invalid length.
[  208.239792][T11557] netlink: 'syz.2.1543': attribute type 3 has an invalid length.
[  208.505496][ T5681] s`z1: Port: 1 Link DOWN
[  208.534931][ T5991] smbdirect: ib_dev[s`z1] removed
[  208.966677][T11612] bond6: option updelay: invalid value (18446744073709518847)
[  208.970207][T11612] bond6: option updelay: allowed values 0 - 2147483647
[  208.975971][T11612] bond6 (unregistering): Released all slaves
[  209.017644][T11615] bond6: option updelay: invalid value (18446744073709518847)
[  209.020468][T11615] bond6: option updelay: allowed values 0 - 2147483647
[  209.024910][T11615] bond6 (unregistering): Released all slaves
[  209.840858][T11683] net_ratelimit: 16 callbacks suppressed
[  209.840877][T11683] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  209.864209][T11683] netlink: 'syz.2.1580': attribute type 1 has an invalid length.
[  209.884770][T11683] 8021q: adding VLAN 0 to HW filter on device bond6
[  209.899727][T11683] bond6: entered promiscuous mode
[  209.902042][T11683] bond6: entered allmulticast mode
[  210.410978][T11702] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  210.796921][T11724] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  210.959830][T11738] __nla_validate_parse: 19 callbacks suppressed
[  210.959842][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'.
[  211.003379][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'.
[  211.165750][T11757] pimreg: entered allmulticast mode
[  211.438687][T11780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1606'.
[  211.443739][T11780] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1606'.
[  212.039293][T11785] sock: sock_timestamping_bind_phc: sock not bind to device
[  212.809433][T11823] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  212.818120][T11823] syzkaller0: entered promiscuous mode
[  212.820632][T11823] syzkaller0: entered allmulticast mode
[  213.685830][T11716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  214.010367][T11854] tipc: New replicast peer: 172.20.20.187
[  214.013654][T11854] tipc: Enabled bearer <udp:syz0>, priority 10
[  214.276691][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'.
[  214.337584][T11880] netlink: 'syz.1.1631': attribute type 32 has an invalid length.
[  217.852764][T11919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  217.982060][T11949] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1645'.
[  217.985032][T11949] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1645'.
[  217.996972][T11946] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1643'.
[  218.006780][T11949] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1645'.
[  218.010349][T11949] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1645'.
[  218.076541][T11949] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1645'.
[  218.082935][T11949] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1645'.
[  218.122888][T11958] openvswitch: netlink: Actions may not be safe on all matching packets
[  218.180716][T11969] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1651'.
[  218.184329][T11969] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1651'.
[  218.515110][T11991] tap0: tun_chr_ioctl cmd 1074025676
[  218.520137][T11991] tap0: owner set to 0
[  218.523475][T11991] netlink: 'syz.1.1660': attribute type 11 has an invalid length.
[  218.538704][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'.
[  218.548287][T11993] erspan0: entered promiscuous mode
[  218.893232][T12005] Bluetooth: hci0: unsupported parameter 5135
[  218.895708][T12005] Bluetooth: hci0: unsupported parameter 8192
[  218.898359][T12005] Bluetooth: hci0: unsupported parameter 5135
[  218.901900][T12005] Bluetooth: hci0: unsupported parameter 8192
[  218.981461][ T5659] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  218.985013][ T5659] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  218.991273][ T5659] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  218.994808][ T5659] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  219.251887][T12025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  219.475751][T12038] geneve1: entered promiscuous mode
[  219.779989][T12054] batadv_slave_0: entered promiscuous mode
[  219.814194][T12054] netlink: 'syz.2.1681': attribute type 1 has an invalid length.
[  219.817462][T12054] nbd: error processing sock list
[  219.820887][T12054] block nbd1: shutting down sockets
[  219.826093][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.903478][T12054] batadv_slave_0 (unregistering): left promiscuous mode
[  219.919331][T12054] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.374133][T12084] syzkaller0: entered promiscuous mode
[  220.378195][T12084] syzkaller0: entered allmulticast mode
[  220.469930][T12097] netlink: 'syz.2.1690': attribute type 9 has an invalid length.
[  222.249530][T12099] x_tables: ip_tables: ah match: only valid for protocol 51
[  222.504694][T12123] syzkaller0: entered promiscuous mode
[  222.507317][T12123] syzkaller0: entered allmulticast mode
[  223.200806][T12172] __nla_validate_parse: 20 callbacks suppressed
[  223.200825][T12172] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1711'.
[  223.218061][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1712'.
[  223.308585][T12175] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  223.386710][T12183] IPVS: length: 91 != 8
[  223.471423][T12192] netlink: 'syz.2.1716': attribute type 1 has an invalid length.
[  223.472823][T12191] netlink: 'syz.2.1716': attribute type 1 has an invalid length.
[  223.481809][T12199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1717'.
[  223.640435][T12192] 8021q: adding VLAN 0 to HW filter on device bond7
[  223.667117][T12197] vxcan1: left allmulticast mode
[  223.680823][T12197] team_slave_0: left allmulticast mode
[  223.698687][T12197] geneve1: left promiscuous mode
[  223.708142][T12197] gretap1: left allmulticast mode
[  223.715879][T12197] bond1: left allmulticast mode
[  223.724406][T12197] bond2: left allmulticast mode
[  223.743099][T12197] bond6: left promiscuous mode
[  223.745240][T12197] bond6: left allmulticast mode
[  223.747656][T12197] 8021q: adding VLAN 0 to HW filter on device bond6
[  223.873016][T12208] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1719'.
[  223.891353][T12213] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  223.915910][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'.
[  224.166609][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1726'.
[  224.192004][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1726'.
[  224.253123][T12235] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  224.306137][T12238] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1731'.
[  224.676453][T12256] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1737'.
[  224.904822][T12267] syzkaller0: entered promiscuous mode
[  224.912790][T12267] syzkaller0: entered allmulticast mode
[  224.917542][T12271] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1743'.
[  224.956422][T12271] syzkaller0: entered promiscuous mode
[  224.969009][T12271] syzkaller0: entered allmulticast mode
[  225.232987][T12290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.451533][T12303] syzkaller0: entered promiscuous mode
[  225.453961][T12303] syzkaller0: entered allmulticast mode
[  225.639901][T12317] netlink: 'syz.1.1754': attribute type 1 has an invalid length.
[  225.704541][T12319] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  225.796537][T12325] IPVS: set_ctl: invalid protocol: 0 65.3.173.56:12427
[  225.827092][T12328] unsupported nlmsg_type 40
[  226.029139][T12341] netlink: 'syz.1.1759': attribute type 21 has an invalid length.
[  226.058127][T12341] netlink: 'syz.1.1759': attribute type 1 has an invalid length.
[  226.524800][T12353] netlink: 'syz.2.1764': attribute type 29 has an invalid length.
[  227.004250][T12378] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  227.008421][T12378] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  227.143750][T12396] ip_tables: iptables: counters copy to user failed while replacing table
[  227.301721][T12403] netlink: 'syz.1.1778': attribute type 1 has an invalid length.
[  227.354339][T12407] netlink: 'syz.0.1780': attribute type 14 has an invalid length.
[  227.828890][T12435] syzkaller0: entered promiscuous mode
[  227.840579][T12435] syzkaller0: entered allmulticast mode
[  228.248458][T12463] __nla_validate_parse: 21 callbacks suppressed
[  228.248481][T12463] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1793'.
[  228.348502][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'.
[  228.354368][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'.
[  228.646390][T12463] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.790260][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1796'.
[  228.989186][T12463] batman_adv: batadv0: Interface deactivated: gretap2
[  229.043765][ T5659] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0
[  229.048021][ T5659] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 60387 - 0
[  229.056189][ T5659] netdevsim netdevsim2 netdevsim0: unset [0, 2] type 1 family 0 port 8472 - 0
[  229.061303][ T5659] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.065176][ T5659] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0
[  229.070054][ T5659] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 60387 - 0
[  229.074036][ T5659] netdevsim netdevsim2 netdevsim1: unset [0, 2] type 1 family 0 port 8472 - 0
[  229.077877][ T5659] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.098193][ T5659] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0
[  229.104978][ T5659] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 60387 - 0
[  229.111680][T12508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1798'.
[  229.112724][ T5659] netdevsim netdevsim2 netdevsim2: unset [0, 2] type 1 family 0 port 8472 - 0
[  229.123862][ T5659] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.128312][ T5659] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0
[  229.139029][ T5659] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 60387 - 0
[  229.155517][ T5659] netdevsim netdevsim2 netdevsim3: unset [0, 2] type 1 family 0 port 8472 - 0
[  229.168726][ T5659] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.396098][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1805'.
[  229.402422][T12525] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1805'.
[  229.549493][T12537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1809'.
[  229.670885][T12550] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1812'.
[  229.683949][T12552] xt_CT: You must specify a L4 protocol and not use inversions on it
[  230.333502][T12575] lo: entered allmulticast mode
[  230.335872][T12575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  230.409494][T12575] pim6reg1: entered promiscuous mode
[  230.411895][T12575] pim6reg1: entered allmulticast mode
[  230.545620][T12579] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1822'.
[  230.824338][T12595] syzkaller1: entered promiscuous mode
[  230.828457][T12595] syzkaller1: entered allmulticast mode
[  231.467072][T12680] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  232.471315][T12708] netlink: 'syz.0.1851': attribute type 1 has an invalid length.
[  232.496330][T12708] 8021q: adding VLAN 0 to HW filter on device bond4
[  234.504567][T12686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  234.705726][T12713] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  234.728059][T12713] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  234.752656][T12713] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  235.083851][T12746] __nla_validate_parse: 4 callbacks suppressed
[  235.083867][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'.
[  235.094747][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'.
[  235.104191][T12747] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1858'.
[  235.108150][T12747] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1858'.
[  235.112628][T12746] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1858'.
[  235.116804][T12746] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1858'.
[  235.487925][T12766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1861'.
[  236.437141][T12769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  236.567783][T12792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1865'.
[  236.900417][T12806] netlink: 'syz.2.1871': attribute type 1 has an invalid length.
[  236.928533][T12806] bond8: entered promiscuous mode
[  236.931575][T12806] 8021q: adding VLAN 0 to HW filter on device bond8
[  237.483881][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'.
[  237.488280][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'.
[  237.497405][T12825] netlink: 'syz.2.1875': attribute type 1 has an invalid length.
[  237.529942][T12825] bond9: entered promiscuous mode
[  237.532773][T12825] 8021q: adding VLAN 0 to HW filter on device bond9
[  237.760192][T12844] x_tables: duplicate underflow at hook 1
[  237.774116][T12844] block nbd0: reconnected socket
[  237.784980][   T56] block nbd0: Receive control failed (result -32)
[  238.196626][T12870] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  238.211167][T12871] lo: entered promiscuous mode
[  238.218661][T12871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  238.569429][T12904] 
[  238.570595][T12904] ======================================================
[  238.573454][T12904] WARNING: possible circular locking dependency detected
[  238.576380][T12904] syzkaller #0 Not tainted
[  238.578297][T12904] ------------------------------------------------------
[  238.581231][T12904] syz.0.1899/12904 is trying to acquire lock:
[  238.583778][T12904] ffffffff8ea84c40 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  238.587591][T12904] 
[  238.587591][T12904] but task is already holding lock:
[  238.590703][T12904] ffffffff8f3c2d20 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0
[  238.594355][T12904] 
[  238.594355][T12904] which lock already depends on the new lock.
[  238.594355][T12904] 
[  238.598663][T12904] 
[  238.598663][T12904] the existing dependency chain (in reverse order) is:
[  238.602396][T12904] 
[  238.602396][T12904] -> #8 (gdp_mutex){+.+.}-{4:4}:
[  238.605236][T12904]        __mutex_lock+0x19d/0x1590
[  238.607358][T12904]        get_device_parent+0x16f/0x3a0
[  238.609677][T12904]        device_add+0x2d4/0xb90
[  238.611695][T12904]        device_create+0x269/0x300
[  238.613750][T12904]        msr_device_create+0x33/0x50
[  238.615888][T12904]        cpuhp_invoke_callback+0x448/0x860
[  238.618246][T12904]        cpuhp_thread_fun+0x362/0x780
[  238.620388][T12904]        smpboot_thread_fn+0x57c/0xa80
[  238.622589][T12904]        kthread+0x389/0x470
[  238.624469][T12904]        ret_from_fork+0x514/0xb70
[  238.626506][T12904]        ret_from_fork_asm+0x1a/0x30
[  238.628639][T12904] 
[  238.628639][T12904] -> #7 (cpuhp_state-up){+.+.}-{0:0}:
[  238.631599][T12904]        cpuhp_thread_fun+0x127/0x780
[  238.633803][T12904]        smpboot_thread_fn+0x57c/0xa80
[  238.636078][T12904]        kthread+0x389/0x470
[  238.637960][T12904]        ret_from_fork+0x514/0xb70
[  238.640029][T12904]        ret_from_fork_asm+0x1a/0x30
[  238.642185][T12904] 
[  238.642185][T12904] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  238.645242][T12904]        cpus_read_lock+0x42/0x160
[  238.647326][T12904]        static_key_slow_inc+0x12/0x30
[  238.649622][T12904]        nbd_genl_reconfigure+0x1301/0x1e80
[  238.652082][T12904]        genl_family_rcv_msg_doit+0x233/0x340
[  238.654518][T12904]        genl_rcv_msg+0x614/0x7a0
[  238.656480][T12904]        netlink_rcv_skb+0x226/0x4a0
[  238.658562][T12904]        genl_rcv+0x28/0x40
[  238.660431][T12904]        netlink_unicast+0x7bb/0x940
[  238.662639][T12904]        netlink_sendmsg+0x813/0xb40
[  238.664825][T12904]        ____sys_sendmsg+0x9b9/0xa20
[  238.666969][T12904]        ___sys_sendmsg+0x2a5/0x360
[  238.669048][T12904]        __x64_sys_sendmsg+0x1bd/0x2a0
[  238.671218][T12904]        do_syscall_64+0x174/0x580
[  238.673330][T12904]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.675943][T12904] 
[  238.675943][T12904] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  238.679100][T12904]        __mutex_lock+0x19d/0x1590
[  238.681230][T12904]        nbd_queue_rq+0x373/0x1150
[  238.683357][T12904]        blk_mq_dispatch_rq_list+0x499/0x1990
[  238.685764][T12904]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  238.688588][T12904]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  238.691264][T12904]        blk_mq_run_hw_queue+0x348/0x4f0
[  238.693491][T12904]        blk_mq_dispatch_list+0xd11/0xe10
[  238.695825][T12904]        blk_mq_flush_plug_list+0x45f/0x540
[  238.698336][T12904]        __blk_flush_plug+0x3ed/0x4d0
[  238.700490][T12904]        __submit_bio+0x465/0x560
[  238.702551][T12904]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  238.705123][T12904]        block_read_full_folio+0x599/0x830
[  238.707509][T12904]        filemap_read_folio+0x12c/0x3a0
[  238.709808][T12904]        do_read_cache_folio+0x354/0x590
[  238.712161][T12904]        read_part_sector+0xb6/0x2b0
[  238.714373][T12904]        adfspart_check_ICS+0xb1/0x960
[  238.716640][T12904]        bdev_disk_changed+0x82b/0x1780
[  238.718978][T12904]        blkdev_get_whole+0x372/0x510
[  238.721245][T12904]        bdev_open+0x324/0xd70
[  238.723194][T12904]        blkdev_open+0x461/0x600
[  238.725202][T12904]        do_dentry_open+0x816/0x1380
[  238.727438][T12904]        vfs_open+0x3b/0x340
[  238.729413][T12904]        path_openat+0x2e3b/0x3890
[  238.731937][T12904]        do_file_open+0x23e/0x4a0
[  238.734139][T12904]        do_sys_openat2+0x113/0x200
[  238.736370][T12904]        __x64_sys_openat+0x138/0x170
[  238.738688][T12904]        do_syscall_64+0x174/0x580
[  238.740890][T12904]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.743625][T12904] 
[  238.743625][T12904] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  238.746715][T12904]        __mutex_lock+0x19d/0x1590
[  238.748919][T12904]        nbd_queue_rq+0xc1/0x1150
[  238.751071][T12904]        blk_mq_dispatch_rq_list+0x499/0x1990
[  238.753643][T12904]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  238.756533][T12904]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  238.759290][T12904]        blk_mq_run_hw_queue+0x348/0x4f0
[  238.761654][T12904]        blk_mq_dispatch_list+0xd11/0xe10
[  238.764123][T12904]        blk_mq_flush_plug_list+0x45f/0x540
[  238.766581][T12904]        __blk_flush_plug+0x3ed/0x4d0
[  238.768819][T12904]        __submit_bio+0x465/0x560
[  238.770947][T12904]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  238.773542][T12904]        block_read_full_folio+0x599/0x830
[  238.776044][T12904]        filemap_read_folio+0x12c/0x3a0
[  238.778399][T12904]        do_read_cache_folio+0x354/0x590
[  238.780768][T12904]        read_part_sector+0xb6/0x2b0
[  238.783047][T12904]        adfspart_check_ICS+0xb1/0x960
[  238.785350][T12904]        bdev_disk_changed+0x82b/0x1780
[  238.787683][T12904]        blkdev_get_whole+0x372/0x510
[  238.789977][T12904]        bdev_open+0x324/0xd70
[  238.792067][T12904]        blkdev_open+0x461/0x600
[  238.794165][T12904]        do_dentry_open+0x816/0x1380
[  238.796382][T12904]        vfs_open+0x3b/0x340
[  238.798352][T12904]        path_openat+0x2e3b/0x3890
[  238.800529][T12904]        do_file_open+0x23e/0x4a0
[  238.802671][T12904]        do_sys_openat2+0x113/0x200
[  238.804872][T12904]        __x64_sys_openat+0x138/0x170
[  238.807187][T12904]        do_syscall_64+0x174/0x580
[  238.809380][T12904]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.812099][T12904] 
[  238.812099][T12904] -> #3 (set->srcu){.+.+}-{0:0}:
[  238.815092][T12904]        __synchronize_srcu+0xc9/0x2f0
[  238.817341][T12904]        elevator_switch+0x1e8/0x7b0
[  238.819588][T12904]        elevator_change+0x2fa/0x480
[  238.821702][T12904]        elevator_set_default+0x375/0x440
[  238.824094][T12904]        blk_register_queue+0x3f3/0x4e0
[  238.826415][T12904]        __add_disk+0x6cb/0xe30
[  238.828509][T12904]        add_disk_fwnode+0xfb/0x4b0
[  238.830747][T12904]        nbd_dev_add+0x733/0xb60
[  238.832912][T12904]        nbd_init+0x15f/0x1e0
[  238.834850][T12904]        do_one_initcall+0x250/0x870
[  238.837097][T12904]        do_initcall_level+0x10a/0x1a0
[  238.839337][T12904]        do_initcalls+0x59/0xa0
[  238.841416][T12904]        kernel_init_freeable+0x29d/0x3e0
[  238.843875][T12904]        kernel_init+0x1d/0x1d0
[  238.845955][T12904]        ret_from_fork+0x514/0xb70
[  238.848145][T12904]        ret_from_fork_asm+0x1a/0x30
[  238.850397][T12904] 
[  238.850397][T12904] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  238.853671][T12904]        __mutex_lock+0x19d/0x1590
[  238.855856][T12904]        elevator_change+0x1af/0x480
[  238.857974][T12904]        elevator_set_none+0xb5/0x140
[  238.860144][T12904]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  238.862800][T12904]        nbd_start_device+0x189/0xb30
[  238.865096][T12904]        nbd_genl_connect+0x1597/0x1c10
[  238.867474][T12904]        genl_family_rcv_msg_doit+0x233/0x340
[  238.870084][T12904]        genl_rcv_msg+0x614/0x7a0
[  238.872242][T12904]        netlink_rcv_skb+0x226/0x4a0
[  238.874602][T12904]        genl_rcv+0x28/0x40
[  238.876483][T12904]        netlink_unicast+0x7bb/0x940
[  238.878625][T12904]        netlink_sendmsg+0x813/0xb40
[  238.880851][T12904]        ____sys_sendmsg+0x9b9/0xa20
[  238.883335][T12904]        ___sys_sendmsg+0x2a5/0x360
[  238.885590][T12904]        __x64_sys_sendmsg+0x1bd/0x2a0
[  238.887900][T12904]        do_syscall_64+0x174/0x580
[  238.890039][T12904]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.892757][T12904] 
[  238.892757][T12904] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  238.896389][T12904]        blk_alloc_queue+0x544/0x690
[  238.898616][T12904]        __blk_mq_alloc_disk+0x194/0x390
[  238.900926][T12904]        nbd_dev_add+0x494/0xb60
[  238.903024][T12904]        nbd_init+0x15f/0x1e0
[  238.905006][T12904]        do_one_initcall+0x250/0x870
[  238.907257][T12904]        do_initcall_level+0x10a/0x1a0
[  238.909580][T12904]        do_initcalls+0x59/0xa0
[  238.911646][T12904]        kernel_init_freeable+0x29d/0x3e0
[  238.914070][T12904]        kernel_init+0x1d/0x1d0
[  238.916149][T12904]        ret_from_fork+0x514/0xb70
[  238.918293][T12904]        ret_from_fork_asm+0x1a/0x30
[  238.920523][T12904] 
[  238.920523][T12904] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  238.923541][T12904]        __lock_acquire+0x1520/0x2cd0
[  238.925841][T12904]        lock_acquire+0x106/0x350
[  238.927996][T12904]        fs_reclaim_acquire+0x71/0x100
[  238.930307][T12904]        __kmalloc_cache_noprof+0x40/0x660
[  238.932717][T12904]        get_device_parent+0x255/0x3a0
[  238.935031][T12904]        device_add+0x2d4/0xb90
[  238.937110][T12904]        wakeup_source_sysfs_add+0x1d3/0x2c0
[  238.939647][T12904]        wakeup_source_register+0x17f/0x380
[  238.942171][T12904]        ep_insert+0xf2f/0x1a60
[  238.944228][T12904]        do_epoll_ctl+0x7b6/0xe20
[  238.946317][T12904]        __x64_sys_epoll_ctl+0x165/0x1b0
[  238.948677][T12904]        do_syscall_64+0x174/0x580
[  238.950876][T12904]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.953616][T12904] 
[  238.953616][T12904] other info that might help us debug this:
[  238.953616][T12904] 
[  238.958013][T12904] Chain exists of:
[  238.958013][T12904]   fs_reclaim --> cpuhp_state-up --> gdp_mutex
[  238.958013][T12904] 
[  238.963064][T12904]  Possible unsafe locking scenario:
[  238.963064][T12904] 
[  238.966302][T12904]        CPU0                    CPU1
[  238.968562][T12904]        ----                    ----
[  238.970797][T12904]   lock(gdp_mutex);
[  238.972479][T12904]                                lock(cpuhp_state-up);
[  238.975333][T12904]                                lock(gdp_mutex);
[  238.978049][T12904]   lock(fs_reclaim);
[  238.979742][T12904] 
[  238.979742][T12904]  *** DEADLOCK ***
[  238.979742][T12904] 
[  238.983076][T12904] 3 locks held by syz.0.1899/12904:
[  238.985178][T12904]  #0: ffffffff8eaf1040 (epnested_mutex){+.+.}-{4:4}, at: epoll_mutex_lock+0x4d/0x60
[  238.989210][T12904]  #1: ffff8881b91ae860 (&ep->mtx){+.+.}-{4:4}, at: epoll_mutex_lock+0x4d/0x60
[  238.992993][T12904]  #2: ffffffff8f3c2d20 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0
[  238.996863][T12904] 
[  238.996863][T12904] stack backtrace:
[  238.999364][T12904] CPU: 0 UID: 0 PID: 12904 Comm: syz.0.1899 Not tainted syzkaller #0 PREEMPT(full) 
[  238.999388][T12904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.999399][T12904] Call Trace:
[  238.999409][T12904]  <TASK>
[  238.999419][T12904]  dump_stack_lvl+0xe8/0x150
[  238.999445][T12904]  print_circular_bug+0x2e1/0x300
[  238.999472][T12904]  check_noncircular+0x12e/0x150
[  238.999496][T12904]  __lock_acquire+0x1520/0x2cd0
[  238.999517][T12904]  ? lockdep_unlock+0x5d/0xd0
[  238.999534][T12904]  ? __lock_acquire+0x13e8/0x2cd0
[  238.999555][T12904]  ? __kmalloc_cache_noprof+0x40/0x660
[  238.999571][T12904]  lock_acquire+0x106/0x350
[  238.999589][T12904]  ? __kmalloc_cache_noprof+0x40/0x660
[  238.999607][T12904]  fs_reclaim_acquire+0x71/0x100
[  238.999623][T12904]  ? __kmalloc_cache_noprof+0x40/0x660
[  238.999636][T12904]  __kmalloc_cache_noprof+0x40/0x660
[  238.999649][T12904]  ? get_device_parent+0x255/0x3a0
[  238.999669][T12904]  ? do_raw_spin_unlock+0x4d/0x210
[  238.999684][T12904]  get_device_parent+0x255/0x3a0
[  238.999705][T12904]  device_add+0x2d4/0xb90
[  238.999724][T12904]  wakeup_source_sysfs_add+0x1d3/0x2c0
[  238.999742][T12904]  wakeup_source_register+0x17f/0x380
[  238.999763][T12904]  ep_insert+0xf2f/0x1a60
[  238.999783][T12904]  ? __pfx_ep_insert+0x10/0x10
[  238.999799][T12904]  ? ep_loop_check+0x50/0x1b0
[  238.999814][T12904]  do_epoll_ctl+0x7b6/0xe20
[  238.999830][T12904]  __x64_sys_epoll_ctl+0x165/0x1b0
[  238.999845][T12904]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  238.999862][T12904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.999876][T12904]  do_syscall_64+0x174/0x580
[  238.999895][T12904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.999911][T12904] RIP: 0033:0x7f9a5919e159
[  238.999927][T12904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.999939][T12904] RSP: 002b:00007f9a573f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  238.999955][T12904] RAX: ffffffffffffffda RBX: 00007f9a59426180 RCX: 00007f9a5919e159
[  238.999991][T12904] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 000000000000000c
[  239.000000][T12904] RBP: 00007f9a5923506b R08: 0000000000000000 R09: 0000000000000000
[  239.000008][T12904] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.000017][T12904] R13: 00007f9a59426218 R14: 00007f9a59426180 R15: 00007ffc098d11c8
[  239.000033][T12904]  </TASK>
[  239.099935][    C0] clocksource: Marking clocksource tsc unstable due to frequency skew
[  239.103335][    C0] clocksource: Watchdog               kvm-clock interval:            79064ns
[  239.106989][    C0] clocksource: Clocksource                  tsc interval:            78467ns
[  239.110786][    C0] tsc: Marking TSC unstable due to clocksource watchdog
[  239.127481][T12913] ip6erspan0: entered allmulticast mode
[  240.599276][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
